Description

A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.

Remediation

References

CVE-2021-23222

Related Vulnerabilities

WordPress Plugin Icon Widget Cross-Site Scripting (1.2.6)

ZenCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6578)

GlassFish CVE-2012-0104 Vulnerability (CVE-2012-0104)

Ampache Deserialization of Untrusted Data Vulnerability (CVE-2017-18375)

WordPress Plugin Simple Ads Manager PHP Object Injection (2.9.8.125)

Severity

Medium

Classification

CVE-2021-23222 CWE-522 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities