Количество 4
Количество 4
CVE-2020-24392
In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused).
CVE-2020-24392
In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused).
CVE-2020-24392
In voloko twitter-stream 0.1.10, missing TLS hostname validation allow ...
GHSA-p6p8-q4pj-f74m
Improper Certificate Validation in twitter-stream
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-24392 In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused). | CVSS3: 5.9 | 0% Низкий | почти 5 лет назад |
 | CVE-2020-24392 In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused). | CVSS3: 5.9 | 0% Низкий | почти 5 лет назад |
| CVE-2020-24392 In voloko twitter-stream 0.1.10, missing TLS hostname validation allow ... | CVSS3: 5.9 | 0% Низкий | почти 5 лет назад |
| GHSA-p6p8-q4pj-f74m Improper Certificate Validation in twitter-stream | CVSS3: 5.9 | 0% Низкий | почти 5 лет назад |
Уязвимостей на страницу