CVE-2024-37405

Publication date

2024-07-12 15:41:03

Family

hackerone

State

PUBLISHED

Description

Livechat messages can be leaked by combining two NoSQL injections affecting livechat:loginByToken (pre-authentication) and livechat:loadHistory.