Lucene search
Veracode Vulnerability DatabaseVERACODE:31436HistoryJul 30, 2021 - 5:07 a.m.
Information Disclosure
2021-07-3005:07:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.003 Low
EPSS
Percentile
71.1%
prosody is vulnerable to information disclosure. A remote attacker is able to obtain confidential information such as the list of admins, users, and banned entities of a multi-user chat room in common configurations.
References
www.openwall.com/lists/oss-security/2021/07/28/4
lists.fedoraproject.org/archives/list/[email protected]/message/7BZRRPCNOETB4MN4XSYPRBBKDIHO27DY/
lists.fedoraproject.org/archives/list/[email protected]/message/EMKIOEP2CYWHVVUCNWISPE4AGH4IR7O2/
prosody.im/
prosody.im/security/advisory_20210722/
security-tracker.debian.org/tracker/CVE-2021-37601
Related
nessus
nessus
FreeBSD : Prosody -- Remote Information Disclosure (5ef14250-f47c-11eb-8f13-5b4de959822e)
2021-08-05 00:00:00
openSUSE 15 Security Update : prosody (openSUSE-SU-2021:1173-1)
2021-08-21 00:00:00
suse
suse
Security update for prosody (moderate)
2021-08-21 00:00:00
openvas
openvas
Fedora: Security Advisory for prosody (FEDORA-2021-1d574ae400)
2021-08-13 00:00:00
Fedora: Security Advisory for prosody (FEDORA-2021-fe9513e089)
2021-08-13 00:00:00
freebsd
freebsd
Prosody -- Remote Information Disclosure
2021-07-22 00:00:00
ubuntucve
ubuntucve
CVE-2021-37601
2021-07-30 00:00:00
cnvd
cnvd
Prosodical Thoughts Prosody Information Disclosure Vulnerability
2021-08-03 00:00:00
nvd
nvd
CVE-2021-37601
2021-07-30 14:15:18
archlinux
archlinux
[ASA-202108-11] prosody: information disclosure
2021-08-10 00:00:00
alpinelinux
alpinelinux
CVE-2021-37601
2021-07-30 14:15:18
cvelist
cvelist
CVE-2021-37601
2021-07-28 13:52:17
cve
cve
CVE-2021-37601
2021-07-30 14:15:18
prion
prion
Design/Logic Flaw
2021-07-30 14:15:00
debiancve
debiancve
CVE-2021-37601
2021-07-30 14:15:18
fedora
fedora
[SECURITY] Fedora 34 Update: prosody-0.11.10-1.fc34
2021-08-12 01:06:57
[SECURITY] Fedora 33 Update: prosody-0.11.10-1.fc33
2021-08-12 01:26:45