Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9c3c-227q-3j67

Опубликовано: 25 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 7.5

Описание

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

EPSS

Процентиль: 3%
0.00124
Низкий

6 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 месяца назад

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

CVSS3: 7.5
nvd
около 1 месяца назад

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

msrc
29 дней назад

X.509 name constraint bypass via Subject CN treated as a DNS name

CVSS3: 7.5
debian
около 1 месяца назад

X.509 name constraint bypass via the Subject Common Name when treated ...

EPSS

Процентиль: 3%
0.00124
Низкий

6 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-295