boostsecurityio / boostsecurityio/lotp

maven (mvn) - via registry override

Open
#81 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
164
Forks
14
PR merge metrics
No merged PRs in 30d

Description

**Description:**

Any cases where one can modify the remote package registry to a malicious one. For example with maven one can add a remote registry in the pom.xml

```xml

...


my-internal-site
https://myserver/repo


...

```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.