← All advisories

Medium severity4.0NVD Advisory· Published Mar 24, 2022· Updated Jun 17, 2026

CVE-2022-27820

CVE-2022-27820

Description

OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.zaproxy:zapMaven	<= 2.11.1	—

Affected products

3

OWASP/Zed Attack Proxy (ZAP)description
ghsa-coords
pkg:maven/org.zaproxy/zap
Range: <= 2.11.1
Trustwave/Zed Attack Proxy
cpe:2.3:a:owasp:zed_attack_proxy:*:*:*:*:*:*:*:*
Range: <=w2022-03-21

Patches

Vulnerability mechanics

References

6

www.openwall.com/lists/oss-security/2022/03/24/3nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-j7xg-5549-jr3jghsaADVISORY
github.com/zaproxy/zaproxy/issues/7165nvdIssue TrackingThird Party AdvisoryWEB
github.com/zaproxy/zaproxy/releasesnvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2022-27820ghsaADVISORY
www.openwall.com/lists/oss-security/2022/03/23/1nvdMailing ListThird Party AdvisoryWEB

News mentions

0

No linked articles in our index yet.