CVE-2017-5603

Technical details for CVE-2017-5603 are not provided in the connected documents; no public specifics on affected products, root cause, or fixes are included. Monitor updates.

CVE-2017-5591

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and...

CVE-2017-5604

Technical details for CVE-2017-5604 are not provided in the connected documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updates.

PT-2017-16594

Name of the Vulnerable Software and Affected Versions yaxim and Bruno versions 0.8.6 through 0.8.8 SleekXMPP versions up to 1.3.1 Slixmpp versions up to 1.2.3 poezio versions 0.8 through 0.10 Movim versions 0.8 through 0.10 converse.js versions prior to 1.0.7 for 1.x or 2.0.5 for 2.x Description ...

PT-2017-16596

Name of the Vulnerable Software and Affected Versions SleekXMPP versions 1.3.1 and earlier Slixmpp versions 1.2.3 and earlier poezio versions 0.8 through 0.10 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in multiple XMPP clients. This allows a remot...

PT-2017-16611

Name of the Vulnerable Software and Affected Versions Xabber versions 1.0.30 through 1.0.74 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in the XMPP client, allowing a remote attacker to impersonate any user in the vulnerable application's display...

CVE-2017-5858: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Converse.js 0.8.0 - 1.0.6...

CVE-2017-5602: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for jappix 1.0.0 to 1.1.6...