CVE-2017-14612

MEDIUM 5.9CVE-2017-14612 · Published 12/07/2018 · updated 17/06/2026

In short

CVE-2017-14612 is a MEDIUM (CVSS 5.9) vulnerability affecting shpock (shpock).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 43.2% of all vulnerabilities.
Fix: update to 3.17.0 or later.

Package	Affected versions	Patched versions
shpock shpock	`< 3.17.0`	`3.17.0`

Description

"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References

crissyfield.de/blog/2017/12/14/missing-certificate-validation · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free