Lucene search
+L

1 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2025/09/17 12:0 a.m.12 views

Dragonfly's manager makes requests to external endpoints with disabled TLS authentication

The Manager disables TLS certificate verification in two HTTP clients figures 3.1 and 3.2. The clients are not configurable, so users have no way to re-enable the verification. golang func getAuthTokenctx context.Context, header http.Header string, error skipped client := &http.Client Timeout:...

6.9CVSS6.7AI score0.00159EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder