GitHub Advisoryadvisory · PyPI

GHSA-q6cq-m9gm-6q2f Slixmpp lacks SSL Certificate hostname validation in XMLStream

HIGH Published 2022-12-25 Modified 2024-10-23 Official page ↗
Aliases
CVE-2022-45197
Ecosystem
PyPI
Packages
slixmpp
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-295
Reviewed
2022-12-30

Affected packages

• PyPI slixmpp: < 1.8.3 → fixed in 1.8.3

Description

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.

Related

Alias · CVE (1)

  • CVE-2022-45197 Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of… vulnerability

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References