Goframe vulnerabilities
We track 1 vulnerability in Goframe products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2024.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Goframe vulnerabilities
- 7.1 High severity
goframe: Missing Validation of OpenSSL Certificate
goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component.