Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qrw5-w925-f5g8

Опубликовано: 20 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.

EPSS

Процентиль: 32%
0.00122
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-281

Связанные уязвимости

CVSS3: 4.3
nvd
больше 3 лет назад

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.

EPSS

Процентиль: 32%
0.00122
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-281