← All advisories

High severity7.5NVD Advisory· Published Jul 12, 2021· Updated Jun 17, 2026

CVE-2021-36377

CVE-2021-36377

Description

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Fossil Scm/Fossil2 versions
cpe:2.3:a:fossil-scm:fossil:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fossil-scm:fossil:*:*:*:*:*:*:*:*range: <2.14.2
- (no CPE)range: <2.14.2, <2.15.2
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Fossil/Fossildescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.