Java-Websocket Project: Security Vulnerabilities
In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.
CVSS Score
9.0
EPSS Score
0.002
Published
2020-05-07