An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Link | Tags |
---|---|
http://coffee-jumbo.com | not applicable |
https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39056.md | exploit |