Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon (XEP-0280) results. This allows a remote attacker (able to send stanzas to a victim) to inject arbitrary messages into the local history, with full control over the sender and receiver displayed to the victim.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Github Monal 数据伪造问题漏洞
Vulnerability Description
Github Monal是用于 iOS 和 macOS 的跨平台现代 XMPP 客户端。 Monal before 4.9 存在数据伪造问题漏洞，该漏洞源于没有对结果进行正确的发送人验证。攻击者可利用该漏洞将任意消息注入到本地历史，并完全控制显示给受害者的发送者和接收者。
CVSS Information
N/A
Vulnerability Type
N/A