Grilo

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-39365 Aug 22, 22:15 MEDIUM PATCH This Month

In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MITM attacks. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Debian Debian Linux Gnome Grilo

NVD

CVSS 3.1

5.9

EPSS

0.9%

CVE-2021-39365

EPSS 1% CVSS 5.9

MEDIUM PATCH This Month

In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MITM attacks. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Debian Debian Linux +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy