9.0
Critical
CVE-2020-11050 In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where…
Description
In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Java-WebSocket 1.4 | earliest → 1.4.1 | No fix stated |