boostsecurityio / boostsecurityio/lotp
maven (mvn) - via registry override
Open
- Dominant language
- HTML
- Stars
- 164
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
**Description:**
Any cases where one can modify the remote package registry to a malicious one. For example with maven one can add a remote registry in the pom.xml
```xml
...
my-internal-site
https://myserver/repo
...
```
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.