Gnome Online Accounts vulnerabilities

2 CVEs affecting Gnome Online Accounts, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1799, published 2013-04-02.

More from Gnome.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-0240, published 2013-04-02. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which…
• CVE-2013-1799, published 2013-04-02. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup library, which allows…