CVE-2018-11712

Name of the Vulnerable Software and Affected Versions WebKitGTK+ versions 2.20.0 through 2.20.1

Description The issue is related to the libsoup network backend of WebKit, specifically in the WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp file. It failed to perform TLS certificate verification for WebSocket connections.

Recommendations For WebKitGTK+ versions 2.20.0 and 2.20.1, consider updating to a version that includes the fix for this issue, as the current versions do not properly verify TLS certificates for WebSocket connections. At the moment, there is no information about a newer version that contains a fix for this vulnerability.