CVE-2020-24393

TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation

published February 19, 2021

CVSS
—
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00852 · 57.8th percentile
Published
2021-02-19T22:44Z
EPSS history
Timeline
  • 19 FEB 22:44Z
    TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation
    cvelistv5