CVE-2022-41707

Published: Oct 19, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user of the application. This is possible because the application exposes user data to the public.

Affected (1)

Products: Relatedcode: Messenger

Relatedcode

1 product

Messenger

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Relatedcode Messenger	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://fluidattacks.com/advisories/coldplay/

Source: help@fluidattacks.com

ExploitThird Party Advisory

https://github.com/relatedcode/Messenger

Source: help@fluidattacks.com

ProductThird Party Advisory

https://fluidattacks.com/advisories/coldplay/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://github.com/relatedcode/Messenger

Source: af854a3a-2127-422b-91ae-364da2661108

ProductThird Party Advisory

Timeline

No history available yet.