CVE-2016-10568 | BDVDB-2026-101222 Detail

HackerOnegeoip-lite-country node module

Description#

geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-311 Missing Encryption of Sensitive Data (CWE-311)

References#

https://nodesecurity.io/advisories/183

Exploit#

No public exploit known

History#

Version 12018-05-29Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.