Description
OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OSS | Http Request (Apache Cordova Plugin) | 6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.github.kevinsawicki:http-request | <= 6.0 | — | GHSA-8mx3-gp3p-vgg7 |