CVE-2021-3813

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813

creationtimestamp| type| source ---|---|--- 2022-02-09 18:12:59+00:00| seen| https://t.me/cibsecurity/37068...

CVE-2021-3813

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813 Improper Privilege Management in chatwoot/chatwoot

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813

CVE-2021-3813 affects the chatwoot/chatwoot project prior to v2.2, arising from an improper privilege management flaw. The issue enables a non-collaborator user to reveal inbox details by enumerating inbox IDs via crafted requests (PoC shows header/cookie reuse and inbox_id exploitation). Impact ...