Otr provides off-the-record messaging capabilities integrated into the Gajim instant messaging client, a narrowly scoped vulnerability surface centered on a single product. The observed weakness class centers on exposure of sensitive information, reflecting the cryptographic and session-handling complexity inherent to a messaging privacy tool; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Otr over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-9107HIGH The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors. | Jan 13, 2017 | 7.5 | 25 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Otr.
Media articles that mention a CVE ID that affects a product developed by Otr — matched by CVE ID, not by vendor name.