GO-2024-3157

vendorUSosv

Mellium allows Authentication Bypass by Spoofing in mellium.im/xmpp

view advisory published 2024-09-26Licence: per source

Mellium allows Authentication Bypass by Spoofing in mellium.im/xmpp

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-46957US	—	0.61% (49th)	—	2024-09-25
Mellium mellium.im/xmpp 0.0.1 through 0.21.4 allows response spoofing if the implementation uses predictable IDs because the stanza type is not checked. This is fixed in 0.22.0.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.