Slixmpp ProjectSlixmpp
3 matches found
CVE-2022-45197
Summary: CVE-2022-45197 affects Slixmpp prior to 1.8.3, which lacks hostname validation for SSL certificates in XMLStream, enabling an attacker to impersonate a server. This is a High-severity, network-based issue with no user interaction required. What’s affected: Slixmpp (Python XMPP library) b...
7.5CVSS7.2AI score0.00473EPSS
Save
CVE-2019-1000021
CVE-2019-1000021 affects the Python XMPP library slixmpp, specifically the XEP-0223 plugin (Persistent Storage of Private Data via PubSub). Affected versions are before commit 7cd73b594e8122dddf847953fcfc85ab4d316416, where an incorrect Access Control configuration could allow private data publis...
7.5CVSS7.3AI score0.02342EPSS
Save