This repository was archived by the owner on Nov 17, 2023. It is now read-only.
[BUGFIX] - Resources Downloaded over Insecure Protocol#19315
Open
b1nslashsh wants to merge 1 commit intoapache:v1.xfrom
Open
[BUGFIX] - Resources Downloaded over Insecure Protocol#19315b1nslashsh wants to merge 1 commit intoapache:v1.xfrom
b1nslashsh wants to merge 1 commit intoapache:v1.xfrom
Conversation
|
Hey @b1nslashsh , Thanks for submitting the PR
CI supported jobs: [unix-gpu, edge, windows-cpu, unix-cpu, sanity, website, miscellaneous, clang, centos-gpu, centos-cpu, windows-gpu] Note: |
Contributor
|
@mxnet-bot run ci [unix-gpu, windows-gpu] |
|
Jenkins CI successfully triggered : [unix-gpu, windows-gpu] |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
This package is vulnerable to MITM or Man-In-The-Middle attack due to a downloading resources through insecure protocols. It is possible for an attacker to intercept and alter the packages which may leads to RCE other attacks which may help the attacker gain access to host
Checklist
Essentials
Changes
Just protocol changed to https and the resource is available in https.
in line https://github.com/apache/incubator-mxnet/blob/master/example/rnn/bucket_R/data_preprocessing_seq_to_one.R#L20
Comments
By switching to HTTPS that issue can be resolved.