← Back

Conversejs

conversejs

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Converse.js
converse.js
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-6591
1Conversejs
1Converse.js
Jun 17, 2026
Feb 19, 2018
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Converse.js and Inverse.js through 3.3 allow remote attackers to obtain sensitive information because it is too difficult to determine whether safe publication of private data was configured or even intended. For example...Show more
Converse.js and Inverse.js through 3.3 allow remote attackers to obtain sensitive information because it is too difficult to determine whether safe publication of private data was configured or even intended. For example, users might have an expectation that chatroom bookmarks are private, but the various interacting software components do not necessarily make that happen.Show less
CVE-2017-5858
1Conversejs
1Converse.js
May 13, 2026
Feb 9, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various k...Show more
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Converse.js (0.8.0 - 1.0.6, 2.0.0 - 2.0.4).Show less