4 matches found
CVE-2022-22885
Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...
9.8CVSS7.1AI score0.01301EPSS
SaveExploits1References1
CVE-2022-22885
Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...
9.8AI score0.01301EPSS
SaveExploits1References2
CVE-2022-22885
CVE-2022-22885 affects Hutool v5.7.18: Hutool.HttpRequest incorrectly ignores TLS/SSL certificate validation, creating a trust-management vulnerability that enables network-based MITM attacks. CVSS3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with base score 9.8; CVSS2.0 also 7.5. Exploitation details ...
9.8CVSS9.4AI score0.01301EPSS
SaveExploits1References2Affected Software1
20