Skip to main content

Evolution Rss

1 CVEs product

Monthly

CVE-2021-39361 MEDIUM This Month

In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Evolution Rss
NVD
CVSS 3.1
5.9
EPSS
0.6%
EPSS 1% CVSS 5.9
MEDIUM This Month

In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Evolution Rss
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy