Vulnerabilities

TI-2022-22262 CVE-2022-45197 · GHSA-q6cq-m9gm-6q2f

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an…

LOW 39

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00514 Published 2022-12-25 Fixed in 1.8.3 CWE-295

TI-2019-15838 CVE-2019-1000021 · GHSA-4g62-mfwx-4q48

slixmpp version before commit 7cd73b5 contains an…

LOW 37

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private Data via PubSub) options profile, used for the c…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02323 Published 2019-02-04 Fixed in 1.4.2 CWE-284

TI-2017-03593 CVE-2017-5591 · GHSA-c35g-jr5f-h83p

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients…

LOW 30

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01714 Published 2017-02-09 Fixed in 1.2.4, 1.3.2 CWE-20

Vulnerabilities

Filters

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an…

slixmpp version before commit 7cd73b5 contains an…

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients…