TI-2017-03592 CVE-2017-5590 · GHSA-8mv4-j2q7-6w42An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients…Priority LOW 28An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0073 · Published 2017-02-09 · No fix listed CWE-20