CVE-2019-11404

CVSS 8.1 HIGHEPSS 1.1%

arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.

CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/arrow-kt/ank/issues/35 https://github.com/arrow-kt/ank/pull/36 https://github.com/arrow-kt/arrow/commit/74198dab522393487d5344f194dc21208ab71ae8 https://github.com/arrow-kt/arrow/issues/1310 https://github.com/arrow-kt/arrow/releases/tag/0.9.0