Lucene search

K
osvGoogleOSV:CVE-2017-5605
HistoryFeb 09, 2017 - 8:59 p.m.

CVE-2017-5605

2017-02-0920:59:00
Google
osv.dev
1

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%

An incorrect implementation of “XEP-0280: Message Carbons” in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application’s display. This allows for various kinds of social engineering attacks. This CVE is for Movim 0.8 - 0.10.

Rows per page:
1-10 of 141

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%