CVE-2019-14365

The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code

published November 12, 2019

CVSS
—
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack (channels, members, etc.).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01919 · 79.7th percentile
Published
2019-11-12T20:47Z
EPSS history
Timeline
  • 12 NOV 20:47Z
    The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code
    cvelistv5