TI-2017-03604 CVE-2017-5602 · GHSA-2pjr-m4w4-33wxAn incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients…Priority LOW 28An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00679 · Published 2017-02-09 · No fix listed CWE-20