CVE-2016-10654

CVE-2016-10654

Vendor Hackerone
Product sfml node module
Weakness CWE-311 · Missing encryption
Published June 4, 2018
Last update September 16, 2024

CVSS base score

What the vulnerability does

01Description

sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Key dates

02Disclosure timeline

June 4, 2018 CVE published
September 16, 2024 Record updated