Описание
psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Уязвимые конфигурации
Конфигурация 1Версия до 20111122 (включая)
Одно из
cpe:2.3:a:psyced:psyced:*:*:*:*:*:*:*:*
cpe:2.3:a:psyced:psyced:20081120:*:*:*:*:*:*:*
cpe:2.3:a:psyced:psyced:20090323:*:*:*:*:*:*:*
cpe:2.3:a:psyced:psyced:20090617:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.0025
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
больше 3 лет назад
psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
EPSS
Процентиль: 48%
0.0025
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-20