Security Advisory

CVE-2016-10568

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-29 20:00:00
Last updated 2024-09-16 19:35:14
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.