01642 06 11 11 Arrange Call

XML Stanza Message Correction Vulnerability in Gajim 1.4.7

CVE-2022-39835 · MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CVE-2022-39835

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.

Learn more about our Web Application Penetration Testing UK.