CVE-2023-23911
An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web hackerone.com