Skip to content
OpenAdvisories

Vendor

Session

1 known vulnerabilities.

Products

Session 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2024-2045

    Session 1.17.5 - LFR via chat attachment

    Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments.

    Session Session