CWE-298: Improper Validation of Certificate Expiration

VariantLikelihood of exploit: Low

A certificate expiration is not validated or is incorrectly validated.

Consequences

Integrity, Other: Other
Authentication, Other: Other

How to prevent it

Architecture and Design: Check for expired certificates and provide the user with adequate information about the nature of the problem and how to proceed.
Implementation: If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the expiration.

Recent advisories

GHSA-339w-3hqm-9pjc — Casdoor doesn't verify that a JWT used for token exchange is still active

All advisories for CWE-298

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor