Lucene search
MitreVULNRICHMENT:CVE-2024-41256HistoryJul 31, 2024 - 12:00 a.m.
CVE-2024-41256
2024-07-3100:00:00
mitre
github.com
1
tls certificate
filestash v0.4
man-in-the-middle
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
37.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Default configurations in the ShareProofVerifier function of filestash v0.4 causes the application to skip the TLS certificate verification process when sending out email verification codes, possibly allowing attackers to access sensitive data via a man-in-the-middle attack.
Related
osv
osv
nvd
nvd
CVE-2024-41256
2024-07-31 21:15:18
veracode
veracode
TLS Certificate Verification Bypass
2024-08-02 04:22:40
cve
cve
CVE-2024-41256
2024-07-31 21:15:18
github
github
cvelist
cvelist
CVE-2024-41256
2024-07-31 00:00:00
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
37.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-41256