CVE-2022-41708

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application

Medium · published October 19, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.6th percentile
Published
2022-10-19T00:00Z
EPSS history
Timeline
  • 19 OCT 00:00Z
    Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application
    cvelistv5