Description
OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.zaproxy:zap | <= 2.11.1 | — | GHSA-j7xg-5549-jr3j |
Medium · 4.0
CVE-2022-27820
EUVD-2022-1452GHSA-j7xg-5549-jr3j
Improper Certificate Validation in OWASP ZAP
Published Mar 24, 2022 · Updated Aug 3, 2024 · Assigned by mitre