CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2022-45197
High (7.5) in slixmpp project slixmpp. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in slixmpp 1.8.3.
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
- CWE
- CWE-295
- Published
- Modified
- Record from
- the NVD, synced
Affected
- slixmpp_project:slixmpp
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-q6cq-m9gm-6q2f | PyPI | slixmpp | <1.8.3 | 1.8.3 |
| PYSEC-2022-43013 | PyPI | slixmpp | <1.8.3 | 1.8.3 |