CyberRota Analysis
AI-GeneratedVersions of stoatchat (delta/Revolt) prior to 20250210-1 allow users with only ViewChannel permissions to access sensitive webhook tokens, as the endpoint incorrectly verifies permissions. This vulnerability enables attackers to send arbitrary messages to the channel, effectively bypassing established permissions and impersonating legitimate bots or webhooks. Organizations using affected versions should prioritize this issue to mitigate the risk of unauthorized message injection and potential misinformation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
stoatchat (delta/Revolt) versions from 20241213-1 before 20250210-1 allow users with only ViewChannel (read) permission on a channel to fetch that channel's webhooks, including their tokens, because the webhook fetch endpoint checked for ViewChannel instead of ManageWebhooks. Using a retrieved token, an attacker can send arbitrary messages to the channel, bypassing channel permissions and impersonating a bot or webhook. Fixed in 20250210-1 (0.8.2).