CVE-2023-38688

HOCH 7.5CVE-2023-38688 · Published 04/08/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-38688 ist eine Schwachstelle (HOCH (CVSS 7.5)) in twitch-tui (xithrius).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.53%, höher als bei 44.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
twitch-tui xithrius	`≤ 2.4.0`	No fix yet

Description

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.

References

Xithrius/twitch-tui · Product
Xithrius/twitch-tui commit 74d13dd · Patch
Xithrius/twitch-tui security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free