CVEvulnerability
CVE-2026-43505
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- Weaknesses
- CWE-420
Description
An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activation scenario, relaying of unauthenticated traffic can occur.
Affected configurations
• prosody prosody (< 0.12.6)
• prosody prosody (>= 13.0.0 < 13.0.5)
Related
Weakness · CWE (1)
- CWE-420 Unprotected Alternate Channel weakness
References
- https://prosody.im/security/advisory_735dd9d3/ Mitigation, Patch, Vendor Advisory
- https://www.openwall.com/lists/oss-security/2026/05/01/5 Mailing List, Patch, Third Party Advisory