Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTPS request options when 'jx_obj.IsSecure' is true
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
jxm 安全漏洞
Vulnerability Description
jxm是JXcore开源的一个消息传递后端。 jxm存在安全漏洞,该漏洞源于证书验证不当,可能导致HTTPS请求中TLS/SSL证书验证被禁用。
CVSS Information
N/A
Vulnerability Type
N/A