Improper Certificate Validation

2022-06-2011:51:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

improper validation

remote server certificate

self-signed certificate

EPSS

0.001

Percentile

46.4%

JSON

undici is vulnerable to improper certificate validation. The vulnerability exists improper validations of the remote server certificate exposing request & response data which allows an attacker to create his own self-signed certificate to connect to the server over the network.