Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
added 2024/02/12 10:26 a.m.7 views

maven: Block repositories using http by default

A flaw was found in maven. Repositories that are defined in a dependency’s Project Object Model pom, which may be unknown to users, are used by default resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that...

9.1CVSS6.5AI score0.08691EPSS
SaveExploits2References5
OSV
OSV
added 2021/04/23 3:15 p.m.8 views

UBUNTU-CVE-2021-26291

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...

9.1CVSS6.7AI score0.08691EPSS
SaveExploits2References12
Rows per page
Query Builder