Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-8760
5
MEDIUMCVSS v2
Published
October 25, 2014
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.
processone/ejabberd
GitHubRobust, Ubiquitous and Massively Scalable Messaging Platform (XMPP, MQTT, SIP Server)
GitHubRobust, Ubiquitous and Massively Scalable Messaging Platform (XMPP, MQTT, SIP Server)<= 2.1.12NVD