{
  "cveId": "CVE-2022-39835",
  "url": "https://patchblox.com/security/cve/CVE-2022-39835",
  "summary": "CVE-2022-39835 is fixed in gajim on 1 platform, first by DEBIAN-CVE-2022-39835, released September 27, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "gajim: An issue was discovered in Gajim through 1.4.7",
  "description": "An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.",
  "published": "2022-09-27T23:15:15Z",
  "severity": "medium",
  "cvss": 5.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "epss": 0.00559,
  "epssPercentile": 0.46763,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "gajim",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.5.0-1",
      "fix": "DEBIAN-CVE-2022-39835",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-39835",
      "released": "2022-09-27T23:15:15Z"
    },
    {
      "platform": "linux",
      "product": "gajim",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.5.0-1",
      "fix": "DEBIAN-CVE-2022-39835",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-39835",
      "released": "2022-09-27T23:15:15Z"
    },
    {
      "platform": "linux",
      "product": "gajim",
      "release": "Debian 14",
      "fixedVersion": "1.5.0-1",
      "fix": "DEBIAN-CVE-2022-39835",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-39835",
      "released": "2022-09-27T23:15:15Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}