Every CVE Search/ Get API key

CVE-2013-7110

Transifex command-line client has improper certificate validation

4.3 MediumFix available

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Exploit likelihood

0.83%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Record
CVE-2013-7110
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Record
CVE-2013-7110
Updated
2026-11-02
EUVDEUVD-2014-0104 No score

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Record
EUVD-2014-0104
Updated
2026-11-03
GitHub AdvisoriesGHSA-jf99-2rj4-jxrm 8.7

Transifex command-line client has improper certificate validation

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Record
GHSA-jf99-2rj4-jxrm
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-20
Updated
2026-11-02
OSVGHSA-jf99-2rj4-jxrm 8.7

Transifex command-line client has improper certificate validation

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Record
GHSA-jf99-2rj4-jxrm
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-20
Updated
2026-11-02
OSV No score

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Record
CVE-2013-7110
Updated
2026-11-02
OSVDEBIAN-CVE-2013-7110 No score

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Record
DEBIAN-CVE-2013-7110
Updated
2026-11-02
OSVPYSEC-2014-72 No score

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Record
PYSEC-2014-72
Updated
2026-11-02
OSVUBUNTU-CVE-2013-7110 No score

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Record
UBUNTU-CVE-2013-7110
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
transifex-client
PyPI
 before 0.10
0.10
transifex-client
Debian:11
 before 0.10-1
0.10-1
transifex-client
PyPI
 before 0.10, plus listed versions
0.10.20.2.10.30.4
Show 12 moreShow less
0.4.10.50.5.10.5.20.60.6.10.70.7.20.7.30.80.90.9.1
0.10
transifex-client
PyPI
 before 0.11.0, plus listed versions
0.10.100.11.beta0.11b30.2
Show 15 moreShow less
0.2.10.30.40.4.10.50.5.10.5.20.60.6.10.70.7.20.7.30.80.90.9.1
0.11.0
transifex-client
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.11.1-10.11.1+git15~g655c5e9-1
 None known
transifex-client
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.12.2-10.12.4-10.13.1-1
 None known
transifex-client
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.13.5-2
 None known
transifex-client
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.14.2-1
 None known

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-7110 is a medium vulnerability (CVSS 4.3) in Transifex, published May 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 57th percentile. Fixed in transifex-client 0.10.

References

Show 7 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open