CVE-2016-10611

CVE-2016-10611 affects strider-sauce, a Strider plugin for Sauce Labs/Selenium, due to its insecure practice of downloading zipped resources over unencrypted HTTP. This vulnerability allows for Man-in-the-Middle (MITM) attacks, enabling an attacker to swap legitimate zip files with malicious ones. With a CVSS score of 8.1 (HIGH), successful exploitation could lead to remote code execution (RCE) with high impact on confidentiality, integrity, and availability, requiring high attack complexity but no user interaction. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.