Описание
kevinsawicki/http-request Missing certificate validation
OSS Http Request (kevinsawicki/http-request) is missing SSL/TLS certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.
Пакеты
Наименование
com.github.kevinsawicki:http-request
maven
Затронутые версииВерсия исправления
<= 6.0
Отсутствует
Связанные уязвимости
CVSS3: 5.9
nvd
больше 6 лет назад
OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.