Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
gfe-sass is a library for promises (CommonJS/Promises/A,B,D) gfe-sass downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.
CVSS Information
N/A
Vulnerability Type
敏感数据加密缺失
Vulnerability Title
gfe-sass 安全漏洞
Vulnerability Description
gfe-sass是一个sass库。 gfe-sass中存在安全漏洞，该漏洞源于程序通过未加密的HTTP链接下载二进制文件。攻击者可通过拦截响应并用恶意的可执行文件替换被请求的二进制文件利用该漏洞在系统上执行代码。
CVSS Information
N/A
Vulnerability Type
N/A