cve/2023/CVE-2023-37920.md

CVE-2023-37920

Description

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.

POC

Reference

No PoCs from references.

Github

• https://github.com/Anasdevs/SIH-SBOM-
• https://github.com/HotDB-Community/HotDB-Engine
• https://github.com/PBorocz/manage
• https://github.com/PBorocz/raindrop-io-py
• https://github.com/jbugeja/test-repo