In short
- CVE-2022-27820 is a MEDIUM (CVSS 4.0) vulnerability affecting org.zaproxy:zap, zed attack proxy (owasp).
- Chance of exploitation in the next 30 days (EPSS): 0.68%, higher than 52.4% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.
NVD description
OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free