An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request.

Published May 20, 2025 · Updated May 20, 2025 · Assigned by mitre