CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

CVE-2024-41253

The CVE-2024-41253 entry affects goframe v2.7.2, where the gclient component is configured to skip TLS certificate verification in the GHTTP client, enabling potential Man-in-the-Middle attacks. This is supported by Red Hat/Veracode/PT-2024-29331 entries and the NVD/NVD-derived descriptions. Impa...

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...