CVE-2024-46957

n/a / n/a PUBLISHED

Description (CNA)

Mellium mellium.im/xmpp 0.0.1 through 0.21.4 allows response spoofing if the implementation uses predictable IDs because the stanza type is not checked. This is fixed in 0.22.0.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://codeberg.org/mellium/xmpp/releases
https://mellium.im/cve/cve-2024-46957/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.