CVE-2022-41708

2022-10-1900:00:00

Fluid Attacks

www.cve.org

relatedcode messenger version

unauthorized access

user chats

permissions validation

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Relatedcode’s Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "relatedcode/Messenger",
    "versions": [
      {
        "version": "7bcd20b",
        "status": "affected"
      }
    ]
  }
]