CVE-2016-10619CWE-311
pennyworth is a natural language templating engine
published June 1, 2018
What it is
pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00537 · 44.2th percentile
- Weakness
- CWE-311 · Missing Encryption of Sensitive Data
- Published
- 2018-06-01T18:00Z
EPSS history
Timeline