zamboni (mozilla) — Vulnerabilities

Signals

Monitoring NVD, CISA KEV, EPSS and the Dragons Community ransomware tracker in near-real timeMonitoring NVD, CISA KEV, EPSS and the Dragons Community ransomware tracker in near-real time

Vendors · mozilla · zamboni

zamboni

· 1 CVEsmozilla · 1 known vulnerabilities

Total

Critical

High

Medium

CISA KEV

CVE-2012-5822HIGH 7.4

Nov 4, 2012

The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python urllib2 library.

All mozilla products All Vendors CVE Database KEV Catalog