Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-24392
HistoryFeb 19, 2021 - 11:15 p.m.

Design/Logic Flaw

2021-02-1923:15:00
PRIOn knowledge base
www.prio-n.com
4

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused).

CPENameOperatorVersion
twitter-streameq0.1.10

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%