Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m8r2-qgr6-4gqm

Опубликовано: 25 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 5.3

Описание

Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS name constraints could be accepted.

Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS name constraints could be accepted.

EPSS

Процентиль: 3%
0.00124
Низкий

6.3 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 месяцев назад

Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS name constraints could be accepted.

CVSS3: 5.3
nvd
около 2 месяцев назад

Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS name constraints could be accepted.

msrc
около 1 месяца назад

Wildcard DNS SAN bypasses CA name-constraint checks

CVSS3: 5.3
debian
около 2 месяцев назад

Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA n ...

EPSS

Процентиль: 3%
0.00124
Низкий

6.3 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-295