Moderate severityNVD Advisory· Published Jul 23, 2019· Updated Aug 5, 2024

CVE-2019-1010206

Description

OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.github.kevinsawicki:http-requestMaven	<= 6.0	—

Affected products

ghsa-coords
pkg:maven/com.github.kevinsawicki/http-request
Range: <= 6.0
Oss/HTTP Request (apache Cordova Plugin)v5
Range: 6

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-8mx3-gp3p-vgg7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-1010206ghsaADVISORY
github.com/kevinsawicki/http-request/blob/master/lib/src/main/java/com/github/kevinsawicki/http/HttpRequest.javaghsax_refsource_MISCWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000