Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q3pp-76rw-fqvm

Опубликовано: 28 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat.

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat.

EPSS

Процентиль: 40%
0.00177
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 3 года назад

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.

CVSS3: 5.3
nvd
почти 3 года назад

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.

CVSS3: 5.3
debian
почти 3 года назад

An issue was discovered in Gajim through 1.4.7. The vulnerability allo ...

CVSS3: 5.3
redos
11 месяцев назад

Уязвимость gajim

CVSS3: 5.3
fstec
почти 3 года назад

Уязвимость компонента XML Handler кроссплатформенный мессенджер для протокола Jabber Gajim, позволяющая нарушителю оказывать влияние на целостность системы

EPSS

Процентиль: 40%
0.00177
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-284