CVE-2013-7110
2 advisories.
PyPI/transifex-client CVE-2013-7110: high 7.5
Transifex command-line client has improper certificate validation
Action: Upgrade transifex-client to 0.10 or later.
pip install transifex-client==0.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10 | - |
Fixed versions
| 0.10 |
Sources
- osv: GHSA-jf99-2rj4-jxrm
- https://nvd.nist.gov/vuln/detail/CVE-2013-7110
- https://github.com/transifex/transifex-client/issues/42
- https://github.com/transifex/transifex-client/commit/e0d1f8b38ec1a24e2999d63420554d8393206f58
- https://github.com/pypa/advisory-database/tree/main/vulns/transifex-client/PYSEC-2014-72.yaml
- https://github.com/transifex/transifex-client
- http://www.openwall.com/lists/oss-security/2013/12/13/5
- http://www.openwall.com/lists/oss-security/2013/12/15/3
CVE-2013-7110 · published · modified · JSON
PyPI/transifex-client CVE-2013-7110: unknown
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary cert
Action: Upgrade transifex-client to 0.11.0 or later.
pip install transifex-client==0.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.0 | - |
Fixed versions
| 0.11.0 |
Sources
- osv: PYSEC-2014-72
- http://www.openwall.com/lists/oss-security/2013/12/15/3
- http://www.openwall.com/lists/oss-security/2013/12/13/5
- https://github.com/transifex/transifex-client/issues/42
- https://github.com/advisories/GHSA-jf99-2rj4-jxrm
CVE-2013-7110 · published · modified · JSON