CVE-2022-45197
Published Dec 25, 2022Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
Vendor/product archive
slixmpp_project / slixmpp CVEs
Beta · best-effort3 CVEs tagged to slixmpp_project / slixmpp — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2019-1000021
Published Feb 4, 2019slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private Data vi…
CVE-2017-5591
Published Feb 9, 2017An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable applica…
Showing 1-3 of 3 CVEsPage 1 of 1