Read the docs

Mellium

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mellium records in CISA KEV

No Mellium vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sasl 1 record MEDIUM Xmpp 1 record LOW

Records

1 record in Xmpp · all components

TI-2022-08763 CVE-2022-24968 · GHSA-h289-x5wc-xcv8

In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT…

Priority LOW 27

In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00539 Published 2022-02-11 Fixed in 0.21.1 CWE-295
Open these records in search →