Description
goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component.
High · 7.1
CVE-2024-41253
EUVD-2024-38990GHSA-9jv3-q6v2-w6g3
goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via th…
Published Jul 31, 2024 · Updated Jul 31, 2024 · Assigned by mitre