Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-76fv-m4gp-q47j

Опубликовано: 25 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

EPSS

Процентиль: 24%
0.00081
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1188

Связанные уязвимости

CVSS3: 5.4
ubuntu
около 1 года назад

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

CVSS3: 5.4
nvd
около 1 года назад

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

msrc
7 месяцев назад

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

CVSS3: 5.4
debian
около 1 года назад

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, acce ...

CVSS3: 5.4
fstec
около 1 года назад

Уязвимость функции mbedtls_ssl_set_hostname программного обеспечения Mbed TLS, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 24%
0.00081
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1188