Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-39835

Опубликовано: 27 сент. 2022
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gajim:gajim:*:*:*:*:*:*:*:*
Версия до 1.5.0 (исключая)

EPSS

Процентиль: 41%
0.00192
Низкий

5.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-284

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 3 лет назад

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.

CVSS3: 5.3
debian
больше 3 лет назад

An issue was discovered in Gajim through 1.4.7. The vulnerability allo ...

CVSS3: 5.3
github
больше 3 лет назад

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat.

CVSS3: 5.3
fstec
больше 3 лет назад

Уязвимость компонента XML Handler кроссплатформенный мессенджер для протокола Jabber Gajim, позволяющая нарушителю оказывать влияние на целостность системы

CVSS3: 5.3
redos
больше 1 года назад

Уязвимость gajim

EPSS

Процентиль: 41%
0.00192
Низкий

5.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-284