2 matches found
maven: Block repositories using http by default
A flaw was found in maven. Repositories that are defined in a dependency’s Project Object Model pom, which may be unknown to users, are used by default resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that...
9.1CVSS6.5AI score0.08691EPSS
SaveExploits2References5
UBUNTU-CVE-2021-26291
Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...
9.1CVSS6.7AI score0.08691EPSS
SaveExploits2References12
20