CVE-2022-39835

Published: Sep 27, 2022Modified: May 21, 2025

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.

Affected (1)

Products: Gajim: Gajim

Gajim

1 product

Gajim

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gajim Gajim	Before 1.5.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

https://dev.gajim.org/gajim/gajim/-/blob/master/ChangeLog

Source: cve@mitre.org

Release NotesVendor Advisory

https://dev.gajim.org/gajim/gajim/-/tags

Source: cve@mitre.org

Vendor Advisory

https://dev.gajim.org/gajim/gajim/-/blob/master/ChangeLog

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://dev.gajim.org/gajim/gajim/-/tags

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.