Psi
1 CVEs
product
Monthly
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.
Information Disclosure
Psi
NVD
GitHub
CVSS 3.0
5.9
EPSS
0.2%
EPSS 0%
CVSS 5.9
MEDIUM
POC
PATCH
This Month
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.
Information Disclosure
Psi
NVD
GitHub