VULNERABILITY INTELLIGENCE

CVE-2022-41707

CVSS score6.5 MEDIUM
EPSS probability1.01%
CISA KEVNot currently listed
Published2022-10-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user of the application. This is possible because the application exposes user data to the public.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references