CVE-2019-1010206

2019-07-2314:15:13

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

JSON

OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.

CPENameOperatorVersion
http-requesteqhttp-request-0.2
http-requesteqhttp-request-2.2
http-requesteqhttp-request-0.7
http-requesteqhttp-request-0.9.1
http-requesteqhttp-request-6.0
http-requesteqhttp-request-1.0
http-requesteqhttp-request-1.1
http-requesteqhttp-request-0.3
http-requesteqhttp-request-3.0
http-requesteqhttp-request-2.0

Name	Operator	Version
http-request	eq	http-request-0.2
http-request	eq	http-request-2.2
http-request	eq	http-request-0.7
http-request	eq	http-request-0.9.1
http-request	eq	http-request-6.0
http-request	eq	http-request-1.0
http-request	eq	http-request-1.1
http-request	eq	http-request-0.3
http-request	eq	http-request-3.0
http-request	eq	http-request-2.0