CVE-2019-1010206

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2019-1010206
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-1010206.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-1010206
Aliases
Published
2019-07-23T14:15:13Z
Modified
2024-10-12T04:11:44.018783Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.

References

Affected packages

Git / github.com/kevinsawicki/http-request

Affected ranges

Type
GIT
Repo
https://github.com/kevinsawicki/http-request
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
405c3fe77795bb426f97bf9f63aa7573ce6f64fb

Affected versions

http-request-0.*

http-request-0.1
http-request-0.2
http-request-0.3
http-request-0.4
http-request-0.5
http-request-0.6
http-request-0.7
http-request-0.8
http-request-0.9
http-request-0.9.1

http-request-1.*

http-request-1.0
http-request-1.1

http-request-2.*

http-request-2.0
http-request-2.1
http-request-2.2

http-request-3.*

http-request-3.0
http-request-3.1

http-request-4.*

http-request-4.0
http-request-4.1
http-request-4.2

http-request-5.*

http-request-5.0
http-request-5.1
http-request-5.2
http-request-5.3
http-request-5.4
http-request-5.4.1
http-request-5.5
http-request-5.6

http-request-6.*

http-request-6.0