Unrated
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a ma...
CVE-2020-24393
First seen on SecPulse
Original description The description as published by the source.
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- package github.com
- report securitylab.github.com