CVE-2019-11405

OpenAPITools/openapi-generator

on github

Published

April 22, 2019

Severity

CVSS v3:

7.4 HIGH

CVSS v2:

5.8 MEDIUM

Description

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.

References

https://github.com/OpenAPITools/openapi-generator/pull/2697
https://github.com/OpenAPITools/openapi-generator/pull/2248
https://github.com/OpenAPITools/openapi-generator/issues/2253

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:openapi-generator:openapi_generator::::::::	n/a	4.0.0-20190419.052012-560	*

External Links

NVD - CVE-2019-11405