twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-08-04T16:18:15.288Z
Updated: 2024-08-02T17:46:56.871Z
Reserved: 2023-07-24T16:19:28.363Z
Link: CVE-2023-38688
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-08-04T17:15:10.097
Modified: 2023-08-09T21:05:36.740
Link: CVE-2023-38688
Redhat
No data.