8 matches found
CVE-2026-126807
WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/history with chatjid=index to list every user's internal I...
CVE-2026-126807 WuzAPI through 1.1.0 Cross-Tenant Information Disclosure via /chat/history
WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/history with chatjid=index to list every user's internal I...
CVE-2026-126807
WuzAPI versions up to and including 1.1.0 are vulnerable to a cross-tenant information disclosure flaw within the GetHistory handler. Authenticated users with message history enabled can exploit this by sending a GET request to /chat/history using chat_jid=index. This allows the attacker to view ...
EUVD-2026-124022
WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/history with chatjid=index to list every user's internal I...
CVE-2026-126807 WuzAPI through 1.1.0 Cross-Tenant Information Disclosure via /chat/history
WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/history with chatjid=index to list every user's internal I...
CVE-2026-126807
WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/history with chatjid=index to list every user's internal I...
CVE-2026-126807: asternic wuzapi: WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows…
WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/history with chatjid=index to list every user's internal I...
PT-2026-145464
WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/history with chat jid=index to list every user's internal...