Medium severity5.3NVD Advisory· Published Sep 27, 2022· Updated Jun 17, 2026

CVE-2022-39835

Description

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.

Affected products

Gajim/Gajim3 versions
cpe:2.3:a:gajim:gajim:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gajim:gajim:*:*:*:*:*:*:*:*range: <1.5.0
- (no CPE)
- (no CPE)range: <=1.4.7
osv-coords
pkg:rpm/opensuse/gajim&distro=openSUSE%20Tumbleweed
Range: < 1.5.1-1.1

Patches

Vulnerability mechanics

References

dev.gajim.org/gajim/gajim/-/blob/master/ChangeLognvdRelease NotesVendor Advisory
dev.gajim.org/gajim/gajim/-/tagsnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000