Authenticated External Attacker Can Access Sensitive User Data in Relatedcode's Messenger v7bcd20b

Authenticated External Attacker Can Access Sensitive User Data in Relatedcode's Messenger v7bcd20b

CVE-2022-41707 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user of the application. This is possible because the application exposes user data to the public.

Learn more about our External Network Penetration Testing.