Skip to content
OpenAdvisories

Package · Maven

com.neovisionaries:nv-websocket-client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.9
    CVE-2017-1000209

    nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate

    The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers …

    com.neovisionaries:nv-websocket-client Maven