Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37645
HistoryOct 21, 2022 - 1:37 p.m.

Authorization Bypass

2022-10-2113:37:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
authorization bypass
vulnerable software
internal chat logs

0.001 Low

EPSS

Percentile

21.6%

github.com/relatedcode/messenger is vulnerable to authorization bypass. The vulnerability exists because the application permissions are not properly handled which allows an attacker to access internal chat logs of any registered user on the server.

0.001 Low

EPSS

Percentile

21.6%

Related for VERACODE:37645