CVE-2017-5602

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for jappix 1.0.0 to 1.1.6...

CVE-2017-5602

CVE-2017-5602 describes an incorrect implementation of XEP-0280 (Message Carbons) in multiple XMPP clients, enabling a remote attacker to impersonate any user (including contacts) in the vulnerable app’s display. Affected software is Jappix versions 1.0.0 to 1.1.6. Reported impact centers on soci...

CVE-2017-5592

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for profanity 0.4.7 - 0.5.0...

CVE-2017-5592

Technical details for CVE-2017-5592 are not publicly available in the provided documents. Monitor for updates from Vulners/EUVD sources.

CVE-2017-5591

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and...

CVE-2017-5603: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...

PT-2017-16595

Name of the Vulnerable Software and Affected Versions ChatSecure versions 3.2.0 through 4.0.0 Zom versions prior to 1.0.11 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in multiple XMPP clients. This allows a remote attacker to impersonate any user,...

PT-2017-16598

Name of the Vulnerable Software and Affected Versions Psi+ versions 0.16.563.580 through 0.16.571.627 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in multiple XMPP clients, allowing a remote attacker to impersonate any user in the vulnerable...

PT-2017-16597

Name of the Vulnerable Software and Affected Versions Profanity versions 0.4.7 through 0.5.0 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in multiple XMPP clients. This allows a remote attacker to impersonate any user, including contacts, in the...

PT-2017-16611

Name of the Vulnerable Software and Affected Versions Xabber versions 1.0.30 through 1.0.74 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in the XMPP client, allowing a remote attacker to impersonate any user in the vulnerable application's display...

PT-2017-16717

Name of the Vulnerable Software and Affected Versions converse.js versions 0.8.0 through 1.0.6 converse.js versions 2.0.0 through 2.0.4 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in multiple XMPP clients, allowing a remote attacker to impersonate...

PT-2017-16610

Name of the Vulnerable Software and Affected Versions Movim versions 0.8 through 0.10 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in multiple XMPP clients, allowing a remote attacker to impersonate any user in the vulnerable application's display...

CVE-2017-5593: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Psi+ 0.16.563.580 -...

CVE-2017-5605: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Movim 0.8 - 0.10...

CVE-2017-5604: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for mcabber 1.0.0 - 1.0.4...

CVE-2017-5590: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for ChatSecure 3.2.0 - 4.0.0;...

CVE-2017-5606: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Xabber only if manually...

CVE-2017-5592: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for profanity 0.4.7 - 0.5.0...

CVE-2017-5858: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Converse.js 0.8.0 - 1.0.6...

CVE-2017-5602: Improper Input Validation

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for jappix 1.0.0 to 1.1.6...