Dependency confusion vulnerability impacts archived Apache project

Threat actors could potentially launch a software supply chain attack by exploiting a dependency confusion flaw impacting the archived Apache Cordova App Harness project, which had been discontinued five years ago, reports The Hacker News.

Article Link: Dependency confusion vulnerability impacts archived Apache project | SC Media

1 post - 1 participant

Read full topic

apache app article attack dependency dependency confusion exploiting flaw hacker harness launch link media project reports software software supply chain software supply chain attack supply supply chain supply chain attack the hacker news threat threat actors vulnerability