CVE-2024-36588

An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to send messages erroneously attributed to arbitrary users via a crafted HTTP request...

CVE-2024-36588

An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to send messages erroneously attributed to arbitrary users via a crafted HTTP request...

CVE-2024-36588

An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to send messages erroneously attributed to arbitrary users via a crafted HTTP request...

CVE-2024-36589

Summary: CVE-2024-36589 involves storage of credentials in plaintext across multiple components: Annonshop.app (versions 2b2b4–ba9fd), DecentralizeJustice/anonymousLocker (2b2b4–ba9fd), and DecentralizeJustice/anonBackend (57837–cd815). The root cause is plaintext credential storage within the ci...