Threats tagged 'ghsa-x63m-gw63-246j'

ChatWiki versions before 2.10.0 have an insecure direct object reference (IDOR) vulnerability. Authenticated users can exploit this flaw to modify fast commands belonging to other tenants by submitting arbitrary sequential IDs to the POST /manage/saveFastCommand endpoint. This allows attackers to overwrite command attributes such as title, type, content, and robot binding, potentially redirecting commands to attacker-controlled URLs and reassigning commands to their own tenant.