Zamboni
1 CVEs
product
Monthly
The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
Python
Information Disclosure
Zamboni
NVD
CVSS 3.1
7.4
EPSS
0.1%
EPSS 0%
CVSS 7.4
HIGH
POC
This Week
The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
Python
Information Disclosure
Zamboni
NVD