CVE-2016-9107 The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors.
HighCVSS 7.5
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| otr gajim-otr | All versions | No fix listed |
References
- [oss-security] 20161030 Re: gajim otr plugin cleartext leak mailing-list third-party-advisory
- [oss-security] 20161030 gajim otr plugin cleartext leak mailing-list third-party-advisory
- 94099 third-party-advisory vdb-entry
- dev.gajim.org issue-tracking patch
- trac-plugins.gajim.org permissions-required