What’s Vulnerable › Vulnerabilities
CVE-2016-10673
- Severity: high (CVSS 8.1 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-06-04 · updated 2026-06-17
- Weakness: CWE-311
Description
ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.
Affected products
- HackerOne ipip-coffee node module: through 1.0.9
References
Get alerted when CVE-2016-10673 or the next vulnerability affects your stack