MonalCVEs & Vulnerabilities

1 CVEs affecting Monal products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

monal 1

CVE-2020-26547CRITICAL

Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon (XEP-0280) results. This allows a remote attacker (able to send stanzas to a victim) to inject arbitrary messages into the local history, with full control over the sender and receiver displayed to the victim.

1 Feb 2021

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database