Description
The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key.
References
- http://www.tickertape.org/projects/sticker/release_notes-3.1.0b2.html
- 1011580 vdb-entry
- 10662 vdb-entry
- sticker-unauth-message-posting(17664) vdb-entry
- 11333 vdb-entry