appium/java-client Maven Package Under Investigation for Network Pivot Threat
The appium/java-client Maven package is reportedly vulnerable to network pivoting due to unvalidated directConnect redirects, potentially leading to session traffic interception and credential theft.
What happened
The appium/java-client Maven package appears to have a security issue where it allows network pivoting via unvalidated directConnect redirects. When directConnect is enabled, the package accepts server-supplied fields without proper validation. This could enable an attacker to fully intercept session traffic and potentially steal credentials. The issue is under investigation and has been tracked with the ID GHSA-28F5-38XR-JH2W. To assess your exposure, review your use of the appium/java-client package and consider implementing allowlist validation to prevent unvalidated redirects. For more details, consult the primary sources.
How 0Day mitigates this
appium/java-client is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.