Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Voloko Twitter-stream 信任管理问题漏洞
Vulnerability Description
Laust Rud Jacobsen Voloko Twitter-stream 是丹麦Laust Rud Jacobsen个人开发者的一个应用软件。提供用于Twitter流API的简单Ruby客户端库。 Voloko Twitter-stream 中存在信任管理问题漏洞。该漏洞源于应用未检查 TLS hostname 参数，攻击者可通过该漏洞引起中间人攻击。 以下产品及版本受到影响：voloko twitter-stream 0.1.10。
CVSS Information
N/A
Vulnerability Type
N/A