Corporate Messaging System getReadReceipts Exposes Sensitive Information

The vulnerability of the getReadReceipts method in the server-based corporate messaging system that supports file and video conferences. Chat involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...