CVE-2019-11404

arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS

High · published April 21, 2019

CVSS v3.0
8.1
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01136 · 66.2th percentile
Published
2019-04-21T16:06Z
EPSS history
Timeline
  • 21 APR 16:06Z
    arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS
    cvelistv5