Filtered by vendor Mellium
Subscriptions
Filtered by product Xmpp
Subscriptions
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-24968 | 1 Mellium | 1 Xmpp | 2022-02-22 | 5.9 Medium |
In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because the wrong host name is selected during this verification. |
Page 1 of 1.