CVE-2017-7192

—

CVSS 3.0

7.5 high

EPSS

2%p78

Published

Apr 6, 2017 (Apr 6, 2017)

Modified

Jun 17, 2026

Description

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).

Vendors: starscream project
Products: starscream
Weakness: CWE-295
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.