Lucene search
+L

95001 matches found

osv_ghsa
osv_ghsa
•added 2023/11/16 6:30 p.m.•43 views

GHSA-8633-G3PH-97RP Missing SSL certificate validation in localstack

Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00301EPSS
SaveExploits0References4
NVD
NVD
•added 2023/11/16 6:15 p.m.•35 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS0.00301EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/16 6:15 p.m.•42 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS0.00307EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/11/16 6:15 p.m.•11 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS5.8AI score0.00301EPSS
SaveExploits0References2
osv_pysec
osv_pysec
•added 2023/11/16 6:15 p.m.•22 views

PYSEC-2023-242

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2023/11/16 6:15 p.m.•21 views

UBUNTU-CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References3
PyPA
PyPA
•added 2023/11/16 6:15 p.m.•16 views

PYSEC-2023-242

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.8AI score0.00307EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/11/16 6:15 p.m.•26 views

Design/Logic Flaw

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

4CVSS6.8AI score0.00307EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2023/11/16 6:15 p.m.•20 views

PYSEC-2023-243

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.8AI score0.00301EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/11/16 6:15 p.m.•24 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/16 6:15 p.m.•29 views

Design/Logic Flaw

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

4CVSS6.9AI score0.00301EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/16 12:00 a.m.•339 views

CVE-2023-48052

CVE-2023-48052 affects HTTPie v3.2.2, where missing SSL certificate validation enables a network-based MITM, allowing eavesdropping and compromising confidentiality and integrity. CVSS v3.1 vectors reflect network access, high impact on confidentiality and integrity, and no user interaction requi...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2023/11/16 12:00 a.m.•100 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.2AI score0.00307EPSS
SaveExploits0
Mend
Mend
•added 2023/11/16 12:00 a.m.•10 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

9.1CVSS0.00301EPSS
SaveExploits0References6
Mend
Mend
•added 2023/11/16 12:00 a.m.•10 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

9.1CVSS0.00307EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2023/11/16 12:00 a.m.•7 views

PT-2023-30684

Name of the Vulnerable Software and Affected Versions localstack version 2.3.2 Description The issue is related to missing SSL certificate validation, which allows attackers to intercept communications between the host and server through a man-in-the-middle attack. This enables attackers to...

7.4CVSS5.8AI score0.00301EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2023/11/16 12:00 a.m.•20 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

6.5AI score0.00307EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/11/16 12:00 a.m.•22 views

HTTPie Security Vulnerability

HTTPie is a command line HTTP client. A security vulnerability exists in the HTTPie CLI version v3.2.2, which stems from a lack of SSL certificate validation, and allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.9AI score0.00307EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/11/16 12:00 a.m.•31 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.2AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2023/11/16 12:00 a.m.•88 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0
Rows per page
Query Builder