Squareup

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Squareup records in CISA KEV

No Squareup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Okhttp 3 records LOW Git-fastclone 2 records MEDIUM Retrofit 2 records MEDIUM Connect Java Software Development Kit 1 record LOW Okhttp-brotli 1 record MEDIUM Okhttp3 1 record LOW Okio 1 record LOW Squalor 1 record MEDIUM

Records

1 record in Okhttp3 · all components

TI-2016-02158 CVE-2016-2402 · GHSA-4hc2-jh7r-wrc3

OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass…

LOW 30

OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0194 Published 2017-01-30 Fixed in 2.7.4, 3.1.2 CWE-295

Open these records in search →

Critical	3
High	4
Medium	5
Low	0
No CVSS	0