CVE-2019-5961

The CVE-2019-5961 entry applies to the Android app “Tootdon for Mastodon” (versions 3.4.1 and earlier). The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via crafted certificates. Documen...