2 matches found
CVE-2014-0364
The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute...
6.9CVSS0.06242EPSS
SaveExploits0References6
CVE-2014-0364: Insufficient Verification of Data Authenticity
The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute...
5CVSS7.3AI score0.06242EPSS
SaveExploits0References2
20