---
id: CVE-2012-5825
title: >-
  Tweepy does not verify that the server hostname matches a domain name in the
  subject's Common Name (CN) or subjectAltName field of the X.509 certificate,
  which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary
  vali…
summary: >-
  Tweepy does not verify that the server hostname matches a domain name in the
  subject's Common Name (CN) or subjectAltName field of the X.509 certificate,
  which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary
  vali…
severity: high
cvss: 7.4
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'
cwe:
  - CWE-20
vendor: tweepy
product: tweepy
affected:
  - tweepy < 3.0.0
patched:
  - tweepy 3.0.0
published: '2012-11-04'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T14:22:42.537'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2012-5825'
references:
  - url: 'http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf'
    label: cve@mitre.org
  - url: 'https://exchange.xforce.ibmcloud.com/vulnerabilities/79831'
    label: cve@mitre.org
  - url: 'http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://exchange.xforce.ibmcloud.com/vulnerabilities/79831'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00609
epssPercentile: 0.4754
ingestedAt: '2026-09-17T15:20:38.952Z'
---

## Overview

Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library.

## Affected

- `tweepy < 3.0.0`

## Remediation

Upgrade past the affected range:

- `tweepy 3.0.0`