CVE-2020-8086

The CVE-2020-8086 issue affects Prosody via the mod_auth_ldap and mod_auth_ldap2 Community Modules, where the XMPP address argument to is_admin() is not fully verified. This can allow remote entities to gain admin-only privileges if their username matches a local admin’s username. Public document...