VULNERABILITY INTELLIGENCE

CVE-2020-11050

CVSS score9 CRITICAL
EPSS probability0.79%
CISA KEVNot currently listed
Published2020-05-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.

Weakness classification

  • security-advisories@github.com: CWE-297
  • nvd@nist.gov: CWE-295

Primary references