medium5.9
CVE-2020-24393
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation.
Impact
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tweetstream Project | Tweetstream | Version 2.6.1 |