In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library because eventmachine is misused...
5.9CVSS6.6AI score0.00884EPSS
SaveExploits1
OSV•added 2021/02/19 11:15 p.m.•9 views
UBUNTU-CVE-2020-24392
In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library because eventmachine is misused...
