CVE-2017-7322

The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certificates from SSL servers, which allows…

published March 30, 2017

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code via a crafted certificate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01231 · 68.5th percentile
Published
2017-03-30T07:00Z
EPSS history
Timeline
  • 30 MAR 07:00Z
    The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certificates from SSL servers, which allows…
    cvelistv5