An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.
References
Link | Resource |
---|---|
https://dev.gajim.org/gajim/gajim/-/blob/master/ChangeLog | Release Notes Vendor Advisory |
https://dev.gajim.org/gajim/gajim/-/tags | Vendor Advisory |
Configurations
History
28 Sep 2022, 22:29
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
First Time |
Gajim gajim
Gajim |
|
References | (MISC) https://dev.gajim.org/gajim/gajim/-/blob/master/ChangeLog - Release Notes, Vendor Advisory | |
References | (MISC) https://dev.gajim.org/gajim/gajim/-/tags - Vendor Advisory | |
CPE | cpe:2.3:a:gajim:gajim:*:*:*:*:*:*:*:* | |
CWE | NVD-CWE-noinfo |
28 Sep 2022, 06:15
Type | Values Removed | Values Added |
---|---|---|
Summary | An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0. |
27 Sep 2022, 23:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-09-27 23:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-39835
Mitre link : CVE-2022-39835
CVE.ORG link : CVE-2022-39835
JSON object : View
Products Affected
gajim
- gajim
CWE