Product:

Movim

(Movim)
Repositories https://github.com/movim/moxl
#Vulnerabilities 2
Date Id Summary Products Score Patch Annotated
2023-09-14 CVE-2023-2848 Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation. Movim 8.8
2017-02-09 CVE-2017-5605 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Movim 0.8 - 0.10. Movim 5.9