CVE-2021-36377

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation

published July 12, 2021

CVSS
—
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00574 · 46.6th percentile
Published
2021-07-12T12:11Z
EPSS history
Timeline
  • 12 JUL 12:11Z
    Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation
    cvelistv5