CVE-2023-23911
An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.
Références
- advisory github.com
- advisory nvd.nist.gov
- web hackerone.com