Поиск уязвимостей
Количество 7
Количество 7
BDU:2022-05563
Уязвимость реализации модуля WebSocket сервера для Jabber/XMPP Prosody, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2022-1150
ALT-PU-2022-1150: package `prosody` update to version 0.11.12-alt2
ALT-PU-2022-1065
ALT-PU-2022-1065: package `prosody` update to version 0.11.12-alt1
CVE-2022-0217
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs (CWE-776). In addition, depending on the libexpat version used, it may also allow injections using XML External Entity References (CWE-611).
CVE-2022-0217
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs (CWE-776). In addition, depending on the libexpat version used, it may also allow injections using XML External Entity References (CWE-611).
CVE-2022-0217
It was discovered that an internal Prosody library to load XML based o ...
openSUSE-SU-2022:0012-1
Security update for prosody
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-05563 Уязвимость реализации модуля WebSocket сервера для Jabber/XMPP Prosody, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 6% Низкий | около 4 лет назад |
| ALT-PU-2022-1150 ALT-PU-2022-1150: package `prosody` update to version 0.11.12-alt2 | CVSS3: 7.5 | 6% Низкий | почти 5 лет назад |
| ALT-PU-2022-1065 ALT-PU-2022-1065: package `prosody` update to version 0.11.12-alt1 | CVSS3: 7.5 | 6% Низкий | почти 5 лет назад |
 | CVE-2022-0217 It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs (CWE-776). In addition, depending on the libexpat version used, it may also allow injections using XML External Entity References (CWE-611). | CVSS3: 7.5 | 6% Низкий | около 4 лет назад |
 | CVE-2022-0217 It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs (CWE-776). In addition, depending on the libexpat version used, it may also allow injections using XML External Entity References (CWE-611). | CVSS3: 7.5 | 6% Низкий | около 4 лет назад |
| CVE-2022-0217 It was discovered that an internal Prosody library to load XML based o ... | CVSS3: 7.5 | 6% Низкий | около 4 лет назад |
 | openSUSE-SU-2022:0012-1 Security update for prosody | 6% Низкий | почти 5 лет назад |
Уязвимостей на страницу