| Package | Affected versions | Patched versions |
|---|---|---|
| jabberd2 | ≤ 2.3.2 |
c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free