CVE-2016-10576 describes a critical vulnerability in the Fuseki server wrapper and management API, affecting versions prior to 1.0.1. This flaw stems from the insecure download of binary resources over HTTP, making it susceptible to Man-in-the-Middle (MITM) attacks. An attacker could exploit this by intercepting and replacing legitimate resources with malicious code, potentially leading to remote code execution (RCE) with high impact on confidentiality, integrity, and availability. While rated with a CVSS score of 8.1 (High) and a FAUCET Risk Score of 63/100, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.0.1CPE matchmatch criteria | cpe:2.3:a:fuseki_project:fuseki:*:*:*:*:*:node.js:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.