CVE-2021-36377

CVE-2021-36377 describes a vulnerability in Fossil versions prior to 2.14.2 and 2.15.x prior to 2.15.2, where the software often bypasses hostname validation during TLS certificate checks. This flaw carries a CVSS score of 7.5 (HIGH), indicating a network-exploitable vulnerability with low attack complexity that could lead to high integrity impact, such as man-in-the-middle attacks, without requiring user interaction. While the vulnerability is significant, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or notable community discussion or media coverage.