Skip to content
OpenAdvisories

Vendor

HiJiffy

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.9

    Incorrect authorization in HiJiffy Chatbot

    Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter  'visitor' in '/api/v1/webchat/message'.

  • Medium 6.9

    Incorrect authorization in HiJiffy Chatbot

    Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/<ID>/'.