CVE-2018-10377

PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers to obtain interaction data.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cve@mitre.org

Published

2018-06-17

Last modified

2024-08-05

Weaknesses

CWE-295

Affected products

• Burp Suite (Portswigger)

References

• http://releases.portswigger.net/2018/06/1734.html
• https://hackerone.com/reports/337680
• https://integritylabs.io/advisories/cve-2018-10377