CVE-2021-37601

Katalog CVE

CVSS 7.5 · High EPSS 2,3%

Kerentanan pada prosody. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.

Rincian

Terbit di NVD

30 Juli 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

2,3% peluang dieksploitasi; lebih tinggi dari 83,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://prosody.im/security/advisory_20210722/ advisory vendor
• http://www.openwall.com/lists/oss-security/2021/07/28/4 mailing list · advisory pihak ketiga
• https://prosody.im/ exploit · product
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BZRRPCNOETB4...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EMKIOEP2CYWHV...