Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2fc3-2632-rc34

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.

EPSS

Процентиль: 55%
0.00875
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
почти 14 лет назад

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.

EPSS

Процентиль: 55%
0.00875
Низкий

Дефекты

CWE-20