Back to Database
Status published
Unknown
CVE-2022-39835
An issue was discovered in Gajim through 1.4.7. The vulnerability...
Vulnerability Description
An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-39835
Credits & Attribution
No credits recorded in the NVD database.
References
More from gajim
View All →CVE-2021-41055
Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to...
High
7.5
CVE-2016-10376
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients"...
Medium
4.5
CVE-2015-8688
Gajim before 0.16.5 allows remote attackers to modify the roster...
Medium
5.4
CVE-2012-5524
The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does...
Medium
4.3
CVE-2012-2093
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary...
Low
3.3
Affected Vendor
gajim
View all reports →Affected Software
gajim
Vulnerable Versions:
0
Timeline
Official Publish:
September 27th, 2022
Last Modified:
May 21st, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.