← Back

Movim

movim

Vendor: Movim • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-2848
1Movim
1Movim
Jun 17, 2026
Sep 14, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation.
CVE-2017-5605
1Movim
1Movim
May 13, 2026
Feb 9, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various k...Show more
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Movim 0.8 - 0.10.Show less