Lucene search
Veracode Vulnerability DatabaseVERACODE:5826HistoryFeb 20, 2018 - 4:24 a.m.
Information Leakage
2018-02-2004:24:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
EPSS
0.002
Percentile
53.1%
Converse.js is vulnerable to information leakage. Access models are not taken into account when storing bookmarks on the server. This means that bookmarks uploaded into Personal Eventing Protocol (PEP) are accessible by all contacts.
Related
cvelist
cvelist
CVE-2018-6591
2018-02-19 14:00:00
osv
osv
Converse.js Exposure of Sensitive Information
2022-05-14 03:12:35
CVE-2018-6591
2018-02-19 14:29:00
prion
prion
Design/Logic Flaw
2018-02-19 14:29:00
nvd
nvd
CVE-2018-6591
2018-02-19 14:29:00
github
github
Converse.js Exposure of Sensitive Information
2022-05-14 03:12:35
cve
cve
CVE-2018-6591
2018-02-19 14:29:00