CVE-2017-16126 Tracking Module in botbait
MediumCVSS 5.3
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked (test, require, pre-install)
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm botbait(npm) | >= 0.0.0 | No fix listed |
| botbait project botbait | <= 2.0.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- web.archive.org
- github.com
- nodesecurity.io third-party-advisory