Libgfbgraph

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-39358 Aug 22, 19:15 MEDIUM This Month

In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Fedora Gnome Libgfbgraph Fedoraproject

NVD

CVSS 3.1

5.9

EPSS

0.7%

CVE-2021-39358

EPSS 1% CVSS 5.9

MEDIUM This Month

In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Fedora Gnome +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy