CVE-2022-31013

Chat Server is the chat server for Vartalap, an open-source messaging application. Versions 2.3.2 until 2.6.0 suffer from a bug in validating the access token, resulting in authentication bypass. The function "this.authProvider.verifyAccessKey" is an async function, as the code is not using "awai...

CVE-2022-31013: Improper Authentication

Chat Server is the chat server for Vartalap, an open-source messaging application. Versions 2.3.2 until 2.6.0 suffer from a bug in validating the access token, resulting in authentication bypass. The function this.authProvider.verifyAccessKey is an async function, as the code is not using await t...

PT-2022-20458

Name of the Vulnerable Software and Affected Versions Chat Server versions 2.3.2 through 2.5.x Description The issue concerns a bug in validating the access token, resulting in authentication bypass. The function this.authProvider.verifyAccessKey is an async function, but the code does not use...