Man-in-the-Middle (MitM)

2019-08-0206:11:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

36.1%

JSON

http-request is vulnerable to man-in-the-middle (MitM). The vulnerability exists due to the lack of SSL certification validation that allows certificate spoofing.

CPENameOperatorVersion
http-requestle6.0

CPE	Name	Operator	Version
	http-request	le	6.0

References

github.com/kevinsawicki/http-request/blob/master/lib/src/main/java/com/github/kevinsawicki/http/HttpRequest.java

github.com/kevinsawicki/http-request/blob/master/lib/src/main/java/com/github/kevinsawicki/http/HttpRequest.java#L270

0.001 Low

EPSS

Percentile

36.1%

JSON

Related for VERACODE:20965