CVE-2022-32229 – A information disclosure vulnerability exists in Rockert.Chat <v5 due to /api/v1/chat.g …

Vuln ID: CVE-2022-32229

Published:  2022-09-23  19:15:11Z

Description: A information disclosure vulnerability exists in Rockert.Chat <v5 due to /api/v1/chat.getThreadsList lack of sanitization of user inputs and can therefore leak private thread messages to unauthorized users via Mongo DB injection.

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):