Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2019-12855

Description

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.

POC

Reference

- https://www.oracle.com/security-alerts/cpuapr2020.html

Github

No PoCs found on GitHub currently.