Vulnerability Description
Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.
CVSS Score
7.4
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pyload | Pyload | < 2023-01-25 |
| Pyload-Ng Project | Pyload-Ng | < 0.5.0b3.dev44 |
Related Weaknesses (CWE)
References
- https://github.com/pyload/pyload/commit/a9098bdf7406e6faf9df3da6ff2d584e90c13bbbPatchThird Party Advisory
- https://huntr.dev/bounties/a370e0c2-a41c-4871-ad91-bc6f31a8e839ExploitPatchThird Party Advisory
- https://github.com/pyload/pyload/commit/a9098bdf7406e6faf9df3da6ff2d584e90c13bbbPatchThird Party Advisory
- https://huntr.dev/bounties/a370e0c2-a41c-4871-ad91-bc6f31a8e839ExploitPatchThird Party Advisory
FAQ
What is CVE-2023-0509?
CVE-2023-0509 is a vulnerability with a CVSS score of 7.4 (HIGH). Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.
How severe is CVE-2023-0509?
CVE-2023-0509 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-0509?
Check the references section above for vendor advisories and patch information. Affected products include: Pyload Pyload, Pyload-Ng Project Pyload-Ng.