CVE-2024-37405
NONE EPSS 40.4%
Published Jul 12, 20241y ago · Modified Jun 17, 20262w ago
Published Jul 12, 2024 1y ago
Last Modified Jun 17, 2026 2w ago
Description
Livechat messages can be leaked by combining two NoSQL injections affecting livechat:loginByToken (pre-authentication) and livechat:loadHistory.
Threat Intelligence
EPSS Exploit Probability
40.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-94 Improper Control of Generation of Code (Code Injection) Injection
References 1
- hackerone.com https://hackerone.com/reports/2580062
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.