Description

OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.

Remediation

References

https://github.com/kevinsawicki/http-request/blob/master/lib/src/main/java/com/github/kevinsawicki/http/HttpRequest.java

Related Vulnerabilities

CVE-2023-28155 Vulnerability in maven package org.webjars:request

CVE-2017-2606 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2023-27095 Vulnerability in maven package cn.hippo4j:hippo4j-core

CVE-2020-2119 Vulnerability in maven package org.jenkins-ci.plugins:azure-ad

CVE-2021-21266 Vulnerability in maven package org.openhab.addons.bundles:org.openhab.binding.hpprinter

Severity

Medium

Classification

CWE-295 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Third Party Advisory