CVE-2023-38688

—

CVSS 3.1

7.5 high

EPSS

<1%p43

Published

Aug 4, 2023 (Aug 4, 2023)

Modified

Jun 17, 2026

Description

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.

Vendors: xithrius
Products: twitch-tui
Weakness: CWE-311
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.