TI-2017-03595 CVE-2017-5593 · GHSA-fj92-mxc6-v4w3An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients…Priority LOW 28An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00679 · Published 2017-02-09 · No fix listed CWE-20