1 matches found
node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance
A flaw was found in Forge also known as node-forge, a JavaScript implementation of Transport Layer Security TLS. The pki.verifyCertificateChain function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extension...
9.1CVSS5.5AI score0.00348EPSS
SaveExploits1References6
20