CVE-2017-5603

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:jitsi:jitsi:2.5.5061:*:*:*:*:*:*:*
cpe:2.3:a:jitsi:jitsi:2.9.5544:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-02-09 20:59

Updated : 2024-02-04 19:11


NVD link : CVE-2017-5603

Mitre link : CVE-2017-5603

CVE.ORG link : CVE-2017-5603


JSON object : View

Products Affected

jitsi

  • jitsi
CWE
CWE-20

Improper Input Validation

CWE-346

Origin Validation Error