ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-32917

—
CVSS 3.1
5.3 medium
EPSS
2%p81
Published
()
Modified
Description

An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP account on the local server, allowing unrestricted use of the server's bandwidth.

Vendors
prosodydebianfedoraproject
Products
prosody, debian linux, fedora
Weakness
CWE-862
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news

No ingested article mentions this CVE yet.