CVE-2016-20011

—

CVSS 3.1

7.5 high

EPSS

1%p72

Published

May 25, 2021 (May 25, 2021)

Modified

Jun 17, 2026

Description

libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the default behavior of SoupSessionSync.

Vendors: gnome
Products: libgrss
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.