Approved changes feed: RSS · Atom

cpe:2.3:a:jitsi:jitsi:2.5.5061:*:*:*:*:*:*:*

part: a version: 2.5.5061 update: *

VendorJitsi (cfece043-1904-5c0e-99a8-c014e18f945e)
ProductJitsi (c40ab047-06a4-5bb0-98b2-8ae7e7552606)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jitsi/jitsi purl2cpe 2026-06-01 10:12:41.831310
pkg:rpm/opensuse/jitsi purl2cpe 2026-06-01 10:12:41.831311

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5603 vulnerable 2026-06-08 05:09:47.329374 Details available
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544.
Published: 2017-02-09T20:00:00.000Z
Updated: 2024-08-05T15:04:15.304Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.