← CVE Intelligence

CVE-2017-16203

HackerOne / coffeescript node module PUBLISHED

Description (CNA)

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

Affected (CNA)

Vendor / productVersions
HackerOne / coffeescript node moduleaffected 1.0.1

CWE

CWE-506

References

ADP enrichment

CVE

No English description supplied.