Vulnerabilities (CVE)

Filtered by vendor Em-http-request Project Subscribe
Filtered by product Em-http-request
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-13482 2 Em-http-request Project, Fedoraproject 2 Em-http-request, Fedora 2023-12-10 5.8 MEDIUM 7.4 HIGH
EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified.