Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-76fv-m4gp-q47j

Опубликовано: 25 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

EPSS

Процентиль: 24%
0.00081
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1188

Связанные уязвимости

CVSS3: 5.4
ubuntu
11 месяцев назад

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

CVSS3: 5.4
nvd
11 месяцев назад

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

msrc
5 месяцев назад

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

CVSS3: 5.4
debian
11 месяцев назад

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, acce ...

CVSS3: 5.4
fstec
11 месяцев назад

Уязвимость функции mbedtls_ssl_set_hostname программного обеспечения Mbed TLS, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 24%
0.00081
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1188