CVE-2016-20011

libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds…

published May 25, 2021

CVSS
—
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the default behavior of SoupSessionSync.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01429 · 72.6th percentile
Published
2021-05-25T20:09Z
EPSS history
Timeline
  • 25 MAY 20:09Z
    libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds…
    cvelistv5