CVE-2016-9107

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.04%

Published

Jan 13, 2017

Modified

May 12, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors.

Weaknesses (CWE)

CWE-200

Affected Products (1)

otr · gajim-otrvulnerable

References (10)

http://www.openwall.com/lists/oss-security/2016/10/30/11

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/30/2

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/94099

Third Party AdvisoryVDB Entry

https://dev.gajim.org/gajim/gajim-plugins/issues/145

Issue TrackingPatch

https://trac-plugins.gajim.org/changeset/c7c2e519ed63377bc943dd01c4661b0fe49321ae

Permissions Required

http://www.openwall.com/lists/oss-security/2016/10/30/11

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/30/2

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/94099

Third Party AdvisoryVDB Entry

https://dev.gajim.org/gajim/gajim-plugins/issues/145

Issue TrackingPatch

https://trac-plugins.gajim.org/changeset/c7c2e519ed63377bc943dd01c4661b0fe49321ae

Permissions Required

KEV Catalog EPSS Scores Vendors All CVEs