CVE-2022-39835
Summary
| CVE | CVE-2022-39835 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-09-27 23:15:00 UTC |
| Updated | 2022-09-28 22:29:00 UTC |
| Description | An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ChangeLog · master · gajim / gajim · GitLab | MISC | dev.gajim.org | |
| Tags · gajim / gajim · GitLab | MISC | dev.gajim.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 184508 Debian Security Update for gajim (CVE-2022-39835)