nv-websocket-client project vulnerabilities

Products

• nv-websocket-client 1

Latest nv-websocket-client project CVEs

Newest publication first

1. CVE-2017-1000209 nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate

   Published 2017-11-17

   Medium·CVSS 5.9 EPSS 0.66%

   The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers via an arbitrary vali...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.