← Back

Xmpp

xmpp

Vendor: Mellium • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-24968
1Mellium
1Xmpp
Jun 17, 2026
Feb 11, 2022
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail....Show more
In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because the wrong host name is selected during this verification.Show less