CVE-2022-41707

CVSS 6.5 MEDIUMEPSS 0.8%CWE-200

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.5EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

19 Oct 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user of the application. This is possible because the application exposes user data to the public.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

n/a · relatedcode/Messenger

References

https://fluidattacks.com/advisories/coldplay/https://github.com/relatedcode/Messenger