Improper input validation in Tigase Xmpp Server
CVE-2012-4670
Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.013 (67.6th percentile) — read the EPSS interpretation.
Affected products
- Tigase Tigase_xmpp_server
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM)