Executive brief
Mellium allows Authentication Bypass by Spoofing in mellium.im/xmpp
Affected products
- Go mellium.im/xmpp
Junglewise Threat Intelligence
CVE-2024-46957: GO-2024-3157 - Mellium allows Authentication Bypass by Spoofing in mellium.im/xmpp
CVE-2024-46957 · Severity: low · CVSS 3.1 · Published 2024-09-26
Technologies: mellium.im/xmpp (Go). Vendors: Go.
Related threats
- GO-2022-0947 - In Mellium mellium.im/xmpp, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under th
- GO-2022-0370 - Man-in-the-middle attack due to improper validation of certificate in mellium.im/xmpp
- GO-2021-0321 - An attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing