Secreto31126

secreto31126

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Whatsapp Api Js

whatsapp-api-js

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-45607 1Secreto31126 1Whatsapp Api Js Sep 19, 2024 Sep 12, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the signature is valid....Show more whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the signature is valid. Incorrect Access Control, anyone using the post or verifyRequestSignature methods to handle messages is impacted. This vulnerability is fixed in 4.0.3.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-45607

1Secreto31126

1Whatsapp Api Js

Sep 19, 2024

Sep 12, 2024

N/A· v4

5.3 MEDIUM· v3

N/A· v2

whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the signature is valid. Incorrect Access Control, anyone using the post or verifyRequestSignature methods to handle messages is impacted. This vulnerability is fixed in 4.0.3.Show less