Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gr56-3gp6-6gmj

Опубликовано: 28 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.2

Описание

During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.

During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.

EPSS

Процентиль: 1%
0.00009
Низкий

6.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 месяца назад

During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.

CVSS3: 5.3
nvd
2 месяца назад

During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.

CVSS3: 5.3
debian
2 месяца назад

During the TLS 1.3 handshake if multiple messages are sent in records ...

CVSS3: 5.3
fstec
2 месяца назад

Уязвимость языка программирования Golang, связанная с недостатками контроля доступа, позволяющая нарушителю повысить свои привилегии

CVSS3: 5.3
redos
около 2 месяцев назад

Уязвимость golang

EPSS

Процентиль: 1%
0.00009
Низкий

6.2 Medium

CVSS3