An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP account on the local server, allowing unrestricted use of the server's bandwidth.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://blog.prosody.im/prosody-0.11.9-released/ | x_refsource_MISC |
| http://www.openwall.com/lists/oss-security/2021/05/13/1 | mailing-list x_refsource_MLIST |
| http://www.openwall.com/lists/oss-security/2021/05/14/2 | mailing-list x_refsource_MLIST |
| https://www.debian.org/security/2021/dsa-4916 | vendor-advisory x_refsource_DEBIAN |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MFFBZWXKPZEVZNQSVJNCUE7WRF3T7DG/ | vendor-advisory x_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWJ2DG2DFJOEFEWOUN26IMYYWGSA2ZEE/ | vendor-advisory x_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUN63AHEWB2WRROJHU3BVJRWLONCT2B7/ | vendor-advisory x_refsource_FEDORA |
| https://security.gentoo.org/glsa/202105-15 | x_refsource_MISC |
| https://lists.debian.org/debian-lts-announce/2021/06/msg00016.html | mailing-list x_refsource_MLIST |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|