| Package | Affected versions | Patched versions |
|---|---|---|
| org.zaproxy:zap | ≤ 2.11.1 | |
| zed attack proxy | ≤ w2022-03-21 |
OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free