Описание
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 0.16.6-1.1 |
| cosmic | not-affected | 0.16.6-1.1 |
| devel | not-affected | 0.16.6-1.1 |
| disco | not-affected | 0.16.6-1.1 |
| eoan | not-affected | 0.16.6-1.1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | 0.16.6-1.1 |
| esm-apps/focal | not-affected | 0.16.6-1.1 |
| esm-apps/jammy | not-affected | 0.16.6-1.1 |
Показывать по
EPSS
3.5 Low
CVSS2
4.5 Medium
CVSS3
Связанные уязвимости
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions.
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote ...
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions.
EPSS
3.5 Low
CVSS2
4.5 Medium
CVSS3