Man-in-the-Middle (MitM)

apache gora is vulnerable to man-in-the-middle attacks. The package resolves dependencies via an insecure HTTP channel, allowing an attacker to intercept and modify package contents during in a Maven build...