CVE-2018-11712

—

CVSS 3.0

7.5 high

EPSS

1%p66

Published

Jun 4, 2018 (Jun 4, 2018)

Modified

Jun 17, 2026

Description

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.

Vendors: webkitgtk
Products: webkitgtk\+
Weakness: CWE-295
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.