Description (CNA)
jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / jser-stat node module | affected All versions |
CWE
CWE-311
References
- https://nodesecurity.io/advisories/188
- https://github.com/jser/stat-js/blob/master/data/url-mapping.js
ADP enrichment
No English description supplied.