vendor:
ChatSecure IM
by:
Vulnerability Laboratory Research Team
5,9
CVSS
HIGH
Persistent Input Validation Web Vulnerability
79
CWE
Product Name: ChatSecure IM
Affected Version From: 2.2.4
Affected Version To: 2.2.4
Patch Exists: YES
Related CWE: N/A
CPE: a:chris_ballinger:chatsecure_im:2.2.4
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: iOS
2014
ChatSecure IM v2.2.4 iOS – Persistent Web Vulnerability
A persistent input validation web vulnerability has been discovered in the ChatSecure IM v2.2.4 iOS mobile web-application. The vulnerability allows an attacker to inject own malicious script codes to the application-side of the chat im ios app.
Mitigation:
The vulnerability can be patched by a secure parse and encode of the message body context before processing to the application-side.