Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Hubspot Subscribe
Filtered by product Hubl-server
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16035 1 Hubspot 1 Hubl-server 2019-10-09 9.3 HIGH 8.1 HIGH
The hubl-server module is a wrapper for the HubL Development Server. During installation hubl-server downloads a set of dependencies from api.hubapi.com. It appears in the code that these files are downloaded over HTTPS however the api.hubapi.com endpoint redirects to a HTTP url. Because of this behavior an attacker with the ability to man-in-the-middle a developer or system performing a package installation could compromise the integrity of the installation.