WS-2010-0001 Medium Severity Vulnerability detected by WhiteSource

[mend-bolt-for-github]

WS-2010-0001 - Medium Severity Vulnerability

Vulnerable Library - commons-codec-1.6.jar

path: /root/.m2/repository/commons-codec/commons-codec/1.6/commons-codec-1.6.jar

Library home page: http://commons.apache.org/codec/

Dependency Hierarchy:

• httpclient-4.3.1.jar (Root Library)
  • ❌ commons-codec-1.6.jar (Vulnerable Library)

Found in commit: f396e60bf74726f66a202d308a1f2865177e4bee

Vulnerability Details

Base64 encode() method is no longer thread-safe in Apache Commons Codec before version 1.7, which might disclose the wrong data or allow an attacker to change non-private fields.

Publish Date: 2010-02-26

URL: WS-2010-0001

CVSS 2 Score Details (5.0)

Base Score Metrics not available

---

Step up your Open Source Security Game with WhiteSource here