CVE-2020-35733: Erlang Erlang/otp

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority.

Affected products

• Erlang Erlang/otp: before 23.2.2 (fixed in 23.2.2)
• Fedoraproject Fedora: version 33 only

Published 2021-01-15. Last modified 2026-06-17.