CVE-2025-2028CWE-295

Lack of TLS validation

Medium · published August 6, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.1th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2025-08-06T14:44Z
EPSS history
Timeline
  • 06 AUG 14:44Z
    Lack of TLS validation
    cvelistv5