TI-2019-04251 CVE-2019-5961 · GHSA-6jvh-7frh-6572Improper certificate validation in Tsukurito, Inc. Android App 'Tootdon for Mastodon'Priority LOW 33The Android App 'Tootdon for Mastodon' version 3.4.1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft…CVSS 3.0HIGH 7.4· Network · No auth · No interaction · EPSS 0.00643 · Published 2019-07-05 · No fix listed CWE-295
