Описание
twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.
Ссылки
- Product
- Patch
- Vendor Advisory
- Product
- Patch
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.4.0 (включая)
cpe:2.3:a:xithrius:twitch-tui:*:*:*:*:*:rust:*:*
EPSS
Процентиль: 70%
0.00643
Низкий
7.5 High
CVSS3
Дефекты
CWE-311
Связанные уязвимости
EPSS
Процентиль: 70%
0.00643
Низкий
7.5 High
CVSS3
Дефекты
CWE-311