CVE-2019-1010206 Vulnerability in maven package com.github.kevinsawicki:http-request

Description

OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.

Remediation

References

https://github.com/kevinsawicki/http-request/blob/master/lib/src/main/java/com/github/kevinsawicki/http/HttpRequest.java

Related Vulnerabilities

CVE-2018-12022 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind

CVE-2022-45384 Vulnerability in maven package org.jenkins-ci.plugins:reverse-proxy-auth-plugin

CVE-2022-23624 Vulnerability in npm package frourio-express

CVE-2019-1353 Vulnerability in npm package nodegit

CVE-2016-10569 Vulnerability in npm package embedza

Severity

Medium

Classification

CWE-295 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N