CVE-2017-16126

MEDIUM

botbait < 2.0.0 - Unauthorized Exposure of Sensitive User Information

Title source: llm
STIX 2.1

Description

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked (test, require, pre-install)

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://nodesecurity.io/advisories/483

Scores

CVSS v3 5.3
EPSS 0.0088
EPSS Percentile 54.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
botbait_project/botbait < 2.0.0
npm/botbait 0.0.0npm
Published Jun 07, 2018
Tracked Since Feb 18, 2026