CVE-2017-5591

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in…

published February 9, 2017

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and Slixmpp all versions up to 1.2.3, as bundled in poezio (0.8 - 0.10) and other products.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01728 · 77.3th percentile
Published
2017-02-09T20:00Z
EPSS history
Timeline
  • 09 FEB 20:00Z
    An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in…
    cvelistv5