Cache Poisoning Attacks on Dependency Management Systems like Maven

sven.ruppert@gmail.com (Sven Ruppert) — Wed, 13 Nov 2024 14:15:16 +0000

Cache poisoning on Maven Caches is a specific attack that targets how Maven Caches manages packages and dependencies in a software development process. It’s essential to understand how Maven works before we look at the details of cache poisoning.

CWE-1123: Excessive Use of Self-Modifying Code for Java Developers

sven.ruppert@gmail.com (Sven Ruppert) — Thu, 12 Sep 2024 11:19:19 +0000

Self-modifying code refers to a type of code that alters its own instructions while it is executing. While this practice can offer certain advantages, such as optimisation and adaptability, it is generally discouraged due to the significant risks and challenges it introduces. For Java developers, using self-modifying code is particularly problematic because it undermines the codebase’s predictability, readability, and maintainability, and Java as a language does not natively support self-modification of its code.

Code Injection Attack on Sven Ruppert

Cache Poisoning Attacks on Dependency Management Systems like Maven

CWE-1123: Excessive Use of Self-Modifying Code for Java Developers