Skip to content
OpenAdvisories
Medium · 5.9 CVE-2019-1010206 EUVD-2022-3206GHSA-8mx3-gp3p-vgg7

kevinsawicki/http-request Missing certificate validation

Published Jul 23, 2019 · Updated Aug 5, 2024 · Assigned by dwf

Description

OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.

Affected products

VendorProductAffectedFixed
OSS Http Request (Apache Cordova Plugin) 6 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.github.kevinsawicki:http-request <= 6.0 — GHSA-8mx3-gp3p-vgg7

References