Known Vulnerabilities for products from Prosody
Listed below are 18 of the newest known vulnerabilities associated with the vendor "Prosody".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-0217 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.5 - HIGH | 2022-08-26 | 2023-11-07 |
| CVE-2021-37601 json | muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members... | 7.5 - HIGH | 2021-07-30 | 2023-11-07 |
| CVE-2021-32921 json | An issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for comparing certain secret stri... | 5.9 - MEDIUM | 2021-05-13 | 2023-11-07 |
| CVE-2021-32920 json | Prosody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation requests. | 7.5 - HIGH | 2021-05-13 | 2023-11-07 |
| CVE-2021-32919 json | An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables a... | 7.5 - HIGH | 2021-05-13 | 2023-11-07 |
| CVE-2021-32918 json | An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote unauthenticated denial-of-servic... | 7.5 - HIGH | 2021-05-13 | 2023-11-07 |
| CVE-2021-32917 json | An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the... | 5.3 - MEDIUM | 2021-05-13 | 2023-11-07 |
| CVE-2020-8086 json | The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address pa... | 9.8 - CRITICAL | 2020-01-28 | 2020-02-04 |
| CVE-2018-10847 json | prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual hos... | 8.8 - HIGH | 2018-07-30 | 2019-10-09 |
| CVE-2017-18265 json | Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility... | 7.5 - HIGH | 2018-05-09 | 2019-10-03 |
| CVE-2016-1232 json | The mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-s... | 7.5 - HIGH | 2016-01-12 | 2016-06-09 |
| CVE-2016-1231 json | Directory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9.x before 0.9.9 allows remot... | 5.9 - MEDIUM | 2016-01-12 | 2016-06-15 |
| CVE-2016-0756 json | The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when gen... | 5.3 - MEDIUM | 2016-01-29 | 2016-12-06 |
| CVE-2014-2745 json | Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to c... | 7.8 - HIGH | 2014-04-11 | 2014-04-19 |
| CVE-2014-2744 json | plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compressio... | 7.8 - HIGH | 2014-04-11 | 2014-04-19 |
| CVE-2011-2532 json | The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of ser... | 5 - MEDIUM | 2011-06-22 | 2011-06-28 |
| CVE-2011-2531 json | Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which m... | 4.3 - MEDIUM | 2011-06-22 | 2011-06-28 |
| CVE-2011-2205 json | Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a den... | 5 - MEDIUM | 2011-06-22 | 2017-08-29 |
Known software with vulnerabilities from Prosody
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Prosody | Mod Auth Ldap | 2020-01-27 |
| Application | Prosody | Mod Auth Ldap2 | 2020-01-27 |
| Application | Prosody | Prosody | 0.1.0 |