Xabber
1 CVEs
product
Monthly
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
Google
Information Disclosure
Xabber
NVD
CVSS 3.1
5.9
EPSS
0.4%
EPSS 0%
CVSS 5.9
MEDIUM
POC
This Month
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
Google
Information Disclosure
Xabber
NVD