TI-2017-03591 CVE-2017-5589 · GHSA-h53w-5gqf-q8r2An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients…Priority LOW 28An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00973 · Published 2017-02-09 · No fix listed CWE-20
