Lucene search
Veracode Vulnerability DatabaseVERACODE:30169HistoryApr 26, 2021 - 7:32 a.m.
Certificate Validation Bypass
2021-04-2607:32:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
59.1%
xmlhttprequest-ssl is vulnerable to certificate validation bypass. The vulnerability exists because rejectUnauthorized is set to false by default, leading to bypass of certificate validation in the https.request function of Node.js.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xmlhttprequest-ssl | le | 1.6.0 | |
| xmlhttprequest-ssl | le | 1.5.5 |
Related
osv
osv
CVE-2021-31597
2021-04-23 00:15:08
Improper Certificate Validation in xmlhttprequest-ssl
2021-05-24 19:52:55
cve
cve
CVE-2021-31597
2021-04-23 00:15:08
debiancve
debiancve
CVE-2021-31597
2021-04-23 00:15:08
prion
prion
Input validation
2021-04-23 00:15:00
nvd
nvd
CVE-2021-31597
2021-04-23 00:15:08
ubuntucve
ubuntucve
CVE-2021-31597
2021-04-23 00:00:00
ibm
ibm
nodejs
nodejs
Improper Verification of Cryptographic Signature
2021-05-24 19:56:34
cvelist
cvelist
CVE-2021-31597
2021-04-22 23:52:48
redhatcve
redhatcve
CVE-2021-31597
2021-04-23 19:43:41
github
github
Improper Certificate Validation in xmlhttprequest-ssl
2021-05-24 19:52:55