📦

okhttp3

Vendor: squareup

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 17 Total Indexed
Avg. EPSS 2.25% Exploit Prob.
Latest CVE CVE-2016-2402 Jan 30

Security Vulnerability Index

Page 1 / 2
5.9 CVSS
CVE-2016-2402

OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate.

EPSS: 2.25%