CVE-2017-11132

Name of the Vulnerable Software and Affected Versions heinekingmedia StashCat versions prior to 1.5.18

Description An issue was discovered where no certificate pinning is implemented, allowing an attacker to issue a certificate for the backend without the application noticing it.

Recommendations For versions prior to 1.5.18, update to version 1.5.18 or later to resolve the issue. As a temporary workaround, consider implementing certificate pinning to prevent unauthorized certificates from being accepted.