Design/Logic Flaw

2022-10-1917:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

external attacker

sensitive data

application vulnerability

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

JSON

Relatedcode’s Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user of the application. This is possible because the application exposes user data to the public.

References

fluidattacks.com/advisories/coldplay/

github.com/relatedcode/Messenger