CVE-2023-37920

Name of the Vulnerable Software and Affected Versions Certifi versions prior to 2023.07.22

Description The issue is related to the recognition of "e-Tugra" root certificates by Certifi, a collection of Root Certificates for validating SSL certificates. e-Tugra's root certificates were subject to an investigation due to reported security issues. The problem is associated with insufficient authentication data verification, which could allow a remote attacker to implement a "man-in-the-middle" attack.

Recommendations For Certifi versions prior to 2023.07.22, update to version 2023.07.22 or later, which removes the "e-Tugra" root certificates from the root store. As a temporary workaround, consider disabling the use of "e-Tugra" root certificates until the update is applied.