GHSA-j7xg-5549-jr3j

Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/03/GHSA-j7xg-5549-jr3j/GHSA-j7xg-5549-jr3j.json

Aliases

• CVE-2022-27820

Published

2022-03-25T00:00:34Z

Modified

2023-04-11T01:29:24.702078Z

Details

OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-27820
• https://github.com/zaproxy/zaproxy/issues/7165
• https://github.com/zaproxy/zaproxy/releases
• https://www.openwall.com/lists/oss-security/2022/03/23/1
• http://www.openwall.com/lists/oss-security/2022/03/24/3