Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34268
HistoryFeb 17, 2022 - 10:21 a.m.

Improper Certificate Validation

2022-02-1710:21:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
improper certificate validation
hutool-http
tls/ssl certificates
trustanyhostnameverifierof

EPSS

0.001

Percentile

48.7%

cn.hutool:hutool-http is vulnerable to Improper certificate validation. The vulnerability exists due to the insufficient validations of TLS/SSL certificates in verify function in TrustAnyHostnameVerifierof class.

EPSS

0.001

Percentile

48.7%