TI-2022-23848 CVE-2022-48195 · GHSA-gvfj-fxx3-j323
An issue was discovered in Mellium mellium.im/sasl before 0.3.1.
Priority MEDIUM 51
An issue was discovered in Mellium mellium.im/sasl before 0.3.1.
Mellium
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Mellium records in CISA KEVNo Mellium vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2022-08763 CVE-2022-24968 · GHSA-h289-x5wc-xcv8
In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT…
Priority LOW 27
In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail.