Lucene search
GoogleOSV:GHSA-HQ38-V658-G3WPHistoryMay 17, 2022 - 2:57 a.m.
XMPP Clients User Impersonation Vulnerability in Movim Moxl
2022-05-1702:57:30
Google
osv.dev
7
0.003 Low
EPSS
Percentile
70.6%
An incorrect implementation of “XEP-0280: Message Carbons” in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application’s display. This allows for various kinds of social engineering attacks. This CVE is for Movim 0.8 - 0.10.
References
openwall.com/lists/oss-security/2017/02/09/29
github.com/movim/moxl/commit/838b0a42efc3b67cc17d63e25ae1d0ea849cd89b
nvd.nist.gov/vuln/detail/CVE-2017-5605
rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf
web.archive.org/web/20170301232720/https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons
web.archive.org/web/20210123225200/https://www.securityfocus.com/bid/96177
Related
osv
osv
nvd
nvd
CVE-2017-5589
2017-02-09 20:59:00
CVE-2017-5605
2017-02-09 20:59:00
cve
cve
CVE-2017-5589
2017-02-09 20:59:00
CVE-2017-5605
2017-02-09 20:59:00
nessus
nessus
openSUSE Security Update : mcabber (openSUSE-2017-282)
2017-02-22 00:00:00
cvelist
cvelist
CVE-2017-5589
2017-02-09 20:00:00
CVE-2017-5605
2017-02-09 20:00:00
prion
prion
Design/Logic Flaw
2017-02-09 20:59:00
Design/Logic Flaw
2017-02-09 20:59:00
github
github
XMPP Clients User Impersonation Vulnerability in Movim Moxl
2022-05-17 02:57:30
archlinux
archlinux
[ASA-201702-11] kdenetwork-kopete: content spoofing
2017-02-12 00:00:00