Executive brief
Man-in-the-middle attack due to improper validation of certificate in mellium.im/xmpp
Affected products
- Go mellium.im/xmpp
Junglewise Threat Intelligence
CVE-2022-24968: GO-2022-0370 - Man-in-the-middle attack due to improper validation of certificate in mellium.im/xmpp
CVE-2022-24968 · Severity: low · CVSS 3.1 · Published 2022-07-29
Technologies: mellium.im/xmpp (Go). Vendors: Go.
Related threats
- GO-2024-3157 - Mellium allows Authentication Bypass by Spoofing in mellium.im/xmpp
- GO-2022-0947 - In Mellium mellium.im/xmpp, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under th
- GO-2021-0321 - An attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing