Description

Send messenger to another user with any sender account

Proof of Concept

1. Login with account A.
2. When click to the message box of the user Victim X we have the id of this message page (in URL), such as https://docker.trudesk.io/messages/628ceabe32b93e62146a7d75 is the URL of message A to victim X. Copy this URL
3. Login with account B. Paste the copied URL and access, send a message, such as "this message is from B"
4. In the page message of A, we receive a message from victim X with content "this message is from B"
(X do not send the message, B send the message but A receive the message from X)