CVE-2022-41708 - Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application

Back Back to CVE browser

MEDIUM

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application

Published Oct 19, 2022

4.3

MEDIUM

CVSS 3.1

EPSS 0.55%

Description

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.

Affected products

Vendor n/a Product relatedcode/Messenger Default
n/a
- Version
  7bcd20b
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

relatedcode/Messenger

n/a

Version	Status	Constraints
7bcd20b	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-281

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44889
Advisory
https://fluidattacks.com/advisories/tiesto/
ExploitThird Party Advisory
https://github.com/relatedcode/Messenger
ProductThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44889		Advisory
https://fluidattacks.com/advisories/tiesto/		ExploitThird Party Advisory
https://github.com/relatedcode/Messenger		ProductThird Party Advisory