CVE-2017-5602

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for jappix 1.0.0 to 1.1.6...

CVE-2017-5602

CVE-2017-5602 describes an incorrect implementation of XEP-0280 (Message Carbons) in multiple XMPP clients, enabling a remote attacker to impersonate any user (including contacts) in the vulnerable app’s display. Affected software is Jappix versions 1.0.0 to 1.1.6. Reported impact centers on soci...