← Back

Bkjs Wand Project

bkjs-wand_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Bkjs Wand
bkjs-wand
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-10571
1Bkjs Wand Project
1Bkjs Wand
Nov 21, 2024
May 31, 2018
N/A· v4
8.1 HIGH· v3
9.3 HIGH· v2
bkjs-wand is imagemagick wand support for node.js and backendjs bkjs-wand versions lower than 0.3.2 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code...Show more
bkjs-wand is imagemagick wand support for node.js and backendjs bkjs-wand versions lower than 0.3.2 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.Show less