W3 Total Cache, 7f3b8aa7e2f030804e7f93da0c1085499f696a4b

CVE, Research URL: 7f3b8aa7e2f030804e7f93da0c1085499f696a4b
Home page URL: Security reports for W3 Total Cache
Application: W3 Total Cache
Published on: May 07, 2019
Research Description: W3 Total Cache [w3-total-cache] < 0.9.7.4 W3 Total Cache <= 0.9.7.3 - Improper Input Validation via openssl_verify W3 Total Cache in versions 0.5 up to 0.9.7.3 does not sufficiently validate the "openssl_verify" result in "/services/MessageValidator/MessageValidator.php". A remote attacker can create a specially crafted certificate and bypass cryptographic checks.
Affected versions: max 0.9.7.4.
Status: vulnerable