Lucene search

PRIOn knowledge basePRION:CVE-2022-41708

HistoryOct 19, 2022 - 7:15 p.m.

Code injection

2022-10-1919:15:00

PRIOn knowledge base

www.prio-n.com

code injection

messenger

external attacker

access

chats

workspaces

application

validate permissions

nvd

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Relatedcode’s Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.

References

fluidattacks.com/advisories/tiesto/

github.com/relatedcode/Messenger