CVE-2021-36377

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation...

CVE-2021-36377

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation...

CVE-2021-36377

CVE-2021-36377 affects Fossil prior to 2.14.2 and 2.15.x before 2.15.2, where TLS hostname verification can be bypassed due to hostname checks being skipped during certificate validation. Impact: potential MITM spoofing of Fossil repositories and information disclosure. Remediation: upgrade Fossi...

CVE-2021-36377

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation...