Description
Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
Unscored
CVE-2012-4670
EUVD-2012-4595GHSA-5jj2-mffv-rjh4
Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP serv…
Published Aug 25, 2012 · Updated Aug 6, 2024 · Assigned by mitre