Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4w8g-vwqf-w48w

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated malicious attacker could hijack the DNS entry for the dependency, and inject malicious code into the component.

Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated malicious attacker could hijack the DNS entry for the dependency, and inject malicious code into the component.

EPSS

Процентиль: 22%
0.00071
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-319
CWE-494

Связанные уязвимости

CVSS3: 9.8
nvd
почти 7 лет назад

Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated malicious attacker could hijack the DNS entry for the dependency, and inject malicious code into the component.

EPSS

Процентиль: 22%
0.00071
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-319
CWE-494