← Database

CVE-2021-37601

HIGH CVSS: 7.5 Published: 2021-07-30 Modified: 2026-06-17

Description

muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.

Affected Platforms

Prosody Prosody

Weakness Type

NVD-CWE-Other

References