exploitDog

CVE-2025-67229

Опубликовано: 23 янв. 2026

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.

Ссылки

https://www.todesktop.com/changelog
Product
Release Notes
https://www.todesktop.com/security/advisories/TDSA-2025-001
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:todesktop:builder:*:*:*:*:*:*:*:*

Версия до 0.32.1 (исключая)

EPSS

Процентиль: 2%

0.00014

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-295

Связанные уязвимости

GHSA-9x5c-g8wh-rgrw

CVSS3: 9.8

github

15 дней назад

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.

EPSS

Процентиль: 2%

0.00014

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-295