Логотип exploitDog
bind:CVE-2023-38688
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-38688

Количество 2

Количество 2

nvd логотип

CVE-2023-38688

больше 2 лет назад

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-779w-xvpm-78jx

больше 2 лет назад

twitch-tui's connection is not encrypted

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-38688

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.

CVSS3: 7.5
1%
Низкий
больше 2 лет назад
github логотип
GHSA-779w-xvpm-78jx

twitch-tui's connection is not encrypted

CVSS3: 7.5
1%
Низкий
больше 2 лет назад

Уязвимостей на страницу