Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7m2p-hrg9-pw87

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.

Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.

EPSS

Процентиль: 36%
0.00152
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
почти 12 лет назад

Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.

nvd
почти 12 лет назад

Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.

debian
почти 12 лет назад

Transifex command-line client before 0.9 does not validate X.509 certi ...

EPSS

Процентиль: 36%
0.00152
Низкий

Дефекты

CWE-20