admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2018/CVE-2018-10847.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

808 B
Raw Blame History

CVE-2018-10847

Description

prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance.

POC

Reference

Github

No PoCs found on GitHub currently.