CVE-2022-41708

4.3 mediumEPSS 0.6%

Medium (4.3) in relatedcode messenger. EPSS 0.6% chance of exploitation in the next 30 days.

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-281
Published: 2022-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

relatedcode:messenger

References

https://fluidattacks.com/advisories/tiesto/
https://github.com/relatedcode/Messenger
https://fluidattacks.com/advisories/tiesto/
https://github.com/relatedcode/Messenger

Check your stack JSON