CVE-2023-33981
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Briar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group. Each spoofed message would need to be an exact duplicate of a legitimate message displayed alongside the spoofed one.
Risk Assessment
This vulnerability could lead to misinformation and loss of trust in communication between users. Attackers may exploit this flaw to create chaos in discussions.
Recommendation
It is recommended to update Briar to version 1.4.22 or later to mitigate this vulnerability. Additionally, monitoring communication for potential spoofing attempts is advised.
Original NVD description (English source)
Briar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofed message would need to be an exact duplicate of a legitimate message displayed alongside the spoofed one.