CVE-2024-41256

CVE-2024-41256 is a medium-severity vulnerability affecting Filestash v0.4, where default configurations in the ShareProofVerifier function disable TLS certificate verification for email verification codes. This oversight creates a critical security flaw, allowing potential man-in-the-middle (MitM) attacks to intercept sensitive data. The vulnerability has a CVSS score of 5.9, indicating a network-based attack with high impact on confidentiality, but requires high attack complexity. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low immediate threat but still warranting attention.