CVE-2024-41256

n/a / n/a PUBLISHED

Description (CNA)

Default configurations in the ShareProofVerifier function of filestash v0.4 causes the application to skip the TLS certificate verification process when sending out email verification codes, possibly allowing attackers to access sensitive data via a man-in-the-middle attack.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://gist.github.com/nyxfqq/a6da3fe6128b978ea1aaa5df639d5f98

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.