CVE-2016-10594

Publication date

2018-06-01 18:00:00

Family

hackerone

State

PUBLISHED

Description

ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.