CVE-2017-5602

CVE-2017-5602 describes an incorrect implementation of XEP-0280 (Message Carbons) in multiple XMPP clients, enabling a remote attacker to impersonate any user (including contacts) in the vulnerable app’s display. Affected software is Jappix versions 1.0.0 to 1.1.6. Reported impact centers on soci...