high7.4
CVE-2019-11405
OpenAPI Tools OpenAPI Generator uses HTTP in various files
Impact
OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.openapitools:openapi-generator | < 4.0.0-20190419.052012-560 | 4.0.0-20190419.052012-560 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openapi-Generator | Openapi Generator | before 4.0.0-20190419.052012-560 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/OpenAPITools/openapi-generator/issues/2253
- https://github.com/OpenAPITools/openapi-generator/pull/2248
- https://github.com/OpenAPITools/openapi-generator/pull/2697
- https://github.com/advisories/GHSA-27j5-2h6r-c9q2
- https://nvd.nist.gov/vuln/detail/CVE-2019-11405