VDB

H1-1278254

H1-1278254 PUBLISHED

Built-in TLS module unexpectedly treats "rejectUnauthorized: undefined" as "rejectUnauthorized: false", disabling all certificate validation

Timeline

  • Sep 10, 2021 CVE Published
  • Sep 10, 2021 PoC Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›