Approved changes feed: RSS · Atom

cpe:2.3:a:profanity_project:profanity:0.4.7:-:*:*:*:*:*:*

part: a version: 0.4.7 update: -

VendorProfanity Project (80a1d14c-9c13-5cd3-9db6-d4039a5e3035)
ProductProfanity (674e8ba4-cd56-5127-9696-12694752d218)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/profanity purl2cpe 2026-06-01 10:16:21.271538
pkg:deb/ubuntu/profanity purl2cpe 2026-06-01 10:16:21.271540
pkg:github/profanity-im/profanity purl2cpe 2026-06-01 10:16:21.271542
pkg:rpm/fedora/profanity purl2cpe 2026-06-01 10:16:21.271544
pkg:rpm/opensuse/profanity purl2cpe 2026-06-01 10:16:21.271545

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5592 vulnerable 2026-06-08 05:09:47.291819 Details available
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for profanity (0.4.7 - 0.5.0).
Published: 2017-02-09T20:00:00.000Z
Updated: 2024-08-05T15:04:15.332Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.