CVE-2016-10682

CVE-2016-10682 affects the massif_project massif software, a PhantomJS fork, due to its insecure practice of downloading resources over HTTP. This vulnerability allows for potential Man-in-the-Middle (MITM) attacks, where an attacker on the network can intercept and replace requested resources with malicious code. With a CVSS v3 score of 8.1 (High), the vulnerability has a network attack vector and high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.