Description

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.

Remediation

References

https://github.com/OpenAPITools/openapi-generator/pull/2697

https://github.com/OpenAPITools/openapi-generator/pull/2248

https://github.com/OpenAPITools/openapi-generator/issues/2253

Related Vulnerabilities

CVE-2021-42767 Vulnerability in maven package org.neo4j.procedure:apoc

CVE-2016-1000220 Vulnerability in npm package kibana

CVE-2019-10332 Vulnerability in maven package org.jenkins-ci.plugins:electricflow

CVE-2018-3722 Vulnerability in npm package merge-deep

CVE-2023-49210 Vulnerability in npm package openssl

Severity

High

Classification

CWE-311 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Third Party Advisory Exploit