{"id":"CVE-2019-11405","aliases":[],"url":"https://o3.security/vulnerability/CVE-2019-11405","summary":"OpenAPI Tools OpenAPI Generator uses HTTP in various files","details":"OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.","published":"2022-05-24T16:44:03Z","modified":"2023-11-08T04:01:01.640565Z","cvss":{"score":7.4,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},"epss":{"score":0.01198,"percentile":0.6531,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Maven","name":"org.openapitools:openapi-generator","fixedVersion":"4.0.0-20190419.052012-560"}],"fix":{"url":"https://github.com/OpenAPITools/openapi-generator/pull/2248","label":"OpenAPITools/openapi-generator#2248"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11405"},{"type":"WEB","url":"https://github.com/OpenAPITools/openapi-generator/issues/2253"},{"type":"WEB","url":"https://github.com/OpenAPITools/openapi-generator/pull/2248"},{"type":"WEB","url":"https://github.com/OpenAPITools/openapi-generator/pull/2697"},{"type":"PACKAGE","url":"https://github.com/OpenAPITools/openapi-generator"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T04:01:01.640565Z"}}