PT-2023-19295 · Softwarex · Softwarex
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SoftwareX versions prior to v6
Description
An improper access control issue exists that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.
Recommendations
For versions prior to v6, update to version v6 or later to resolve the issue. As a temporary workaround, consider restricting user permissions to change the group key of a chat room until a patch is available.
Exploit
Fix
Improper Access Control
Inadequate Encryption Strength
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Softwarex