Related Vulnerabilities: CVE-2021-34825  

Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the local system.

Severity Medium

Remote Yes

Type Certificate verification bypass

Description

Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the local system.

AVG-2079 quassel-core 0.13.1-8 Medium Vulnerable

https://bugs.quassel-irc.org/issues/1728
https://github.com/quassel/quassel/pull/581