📦

xmpp

Vendor: mellium

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 1 Total Indexed
Avg. EPSS 0.18% Exploit Prob.
Latest CVE CVE-2022-24968 Feb 11

Security Vulnerability Index

Page 1 / 1
5.9 CVSS
CVE-2022-24968

In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because the wrong host name is selected during this verification.

EPSS: 0.18%