CVE-2020-24392

Source

https://nvd.nist.gov/vuln/detail/CVE-2020-24392

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-24392.json

Aliases

• GHSA-p6p8-q4pj-f74m

Published

2021-02-19T23:15:12Z

Modified

2023-11-29T08:14:21.120956Z

Details

In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused).

References

• https://securitylab.github.com/advisories/GHSL-2020-097-voloko-twitter-stream
• https://github.com/voloko/twitter-stream