CVE-2013-7110
transifex transifex: no CVSS score yet. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in transifex-client 0.10, 0.11.0.
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- transifex:transifex
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jf99-2rj4-jxrm | PyPI | transifex-client | <0.10 | 0.10 |
| PYSEC-2014-72 | PyPI | transifex-client | <0.11.0 | 0.11.0 |