Squareup

Okhttp

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2023-0833

Exploit
  • EPSS 0.04%
  • Veröffentlicht 27.09.2023 15:16:03
  • Zuletzt bearbeitet 21.11.2024 07:37:55

A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to acces...

5.9

CVE-2018-20200

Exploit
  • EPSS 0.31%
  • Veröffentlicht 18.04.2019 19:29:01
  • Zuletzt bearbeitet 21.11.2024 04:01:05

CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by changing SSLContext and the boolean values while hooking the application. NOTE: This id is disputed because some parties don't con...

5.9

CVE-2016-2402

  • EPSS 2.68%
  • Veröffentlicht 30.01.2017 22:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate.