UpHeron
All vulnerabilities

Servers and applications

CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority.

Severity
High 7.5
Published
15 Jan 2021
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Fixed in
23.2.2
Sources
NVD

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • Every version before 23.2.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-35733
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-35733