TI-2023-02669 CVE-2023-2848 · GHSA-m9rr-h88h-h8w6
Origin validation error in Movim
Priority MEDIUM 40
Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability.
Movim
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Movim records in CISA KEVNo Movim vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2017-03607 CVE-2017-5605 · GHSA-hq38-v658-g3wp
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients…
Priority LOW 28
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.