VULNERABILITY INTELLIGENCE
CVE-2021-32917
CVSS score5.3 MEDIUM
EPSS probability2.16%
CISA KEVNot currently listed
Published2021-05-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP account on the local server, allowing unrestricted use of the server's bandwidth.
Weakness classification
- nvd@nist.gov: CWE-862
Primary references
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Mitigation, Third Party Advisory
- cve@mitre.org — Release Notes, Vendor Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Mitigation, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory