CVE:CVE-2013-7110
CNNVD:CNNVD-201405-013
Transifex command-line client是Transifex团队开发的一套用于管理翻译的命令行工具。
Transifex command-line client 0.9及之前的版本中存在安全漏洞，该漏洞源于程序没有验证数据传输连接的X.509证书。攻击者可借助任意证书利用该漏洞实施中间人攻击，欺骗Transifex服务器。
solution:Upgrade transifex transifex to a higher version than 0.9,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,and avoid the version (,0.9],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8