high7.5
CVE-2021-37601
muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a…
Impact
muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prosody | Prosody | from 0.11.0 through 0.11.9 |
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2021/07/28/4
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BZRRPCNOETB4MN4XSYPRBBKDIHO27DY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EMKIOEP2CYWHVVUCNWISPE4AGH4IR7O2/
- https://prosody.im/
- https://prosody.im/security/advisory_20210722/
- http://www.openwall.com/lists/oss-security/2021/07/28/4
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BZRRPCNOETB4MN4XSYPRBBKDIHO27DY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EMKIOEP2CYWHVVUCNWISPE4AGH4IR7O2/
- https://prosody.im/
- https://prosody.im/security/advisory_20210722/