Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-37601

Опубликовано: 30 июл. 2021
Источник: debian
EPSS Низкий

Описание

muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
prosodyfixed0.11.9-2package
prosodyno-dsabusterpackage
prosodynot-affectedstretchpackage

Примечания

  • https://prosody.im/security/advisory_20210722/

EPSS

Процентиль: 84%
0.02329
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.

CVSS3: 7.5
nvd
больше 5 лет назад

muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.

suse-cvrf
около 5 лет назад

Security update for prosody

CVSS3: 7.5
github
больше 4 лет назад

muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.

CVSS3: 7.5
altlinux
около 5 лет назад

ALT-PU-2021-2588: package `prosody` update to version 0.11.10-alt1

EPSS

Процентиль: 84%
0.02329
Низкий