2 matches found
Forge: TLS client crash when the server sends no certificate
Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malicious TLS server, or an on-path attacker who removes the server's Certificate message, can make connection.process throw a TypeError, which crashes applications that use the forge TL...
5.9CVSS5.9AI score0.00204EPSS
SaveExploits0References5Affected Software1
20