logo

Database

Insecure digital certificates In org.apache.thrift:libthrift

Description

Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions