CVE-2022-27820: Owasp Zed Attack Proxy

Medium severity, CVSS 4.0. EPSS: 0.7% chance of exploitation in the next 30 days.

OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.

Affected products

• Owasp Zed Attack Proxy: up to and including w2022-03-21

Published 2022-03-24. Last modified 2026-06-17.