Debian/jabberd2: unknown
s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2
Action: Upgrade jabberd2 to 2.2.17-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.17-1 | - |
Fixed versions
| 2.2.17-1 |
Sources
published · modified · JSON