Threats tagged 'ghsa-744h-gprq-h6r9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-126807WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that Medium5.32026-11-11GCVE DatabaseCVE-2026-126807 WuzAPI versions up to 1.1.0 have a vulnerability in the GetHistory handler that allows authenticated users to access chat metadata from other tenants. This cross-tenant information disclosure lets attackers with message history enabled retrieve internal user IDs, stored chat JIDs, and last-message timestamps by making specific GET requests. Report on CVE-2026-126807 Vulnerability CWE-639 #ghsa-744h-gprq-h6r9	GCVE Database	2026-11-11

Page 1 of 1