CyberRota Analysis
AI-GeneratedThe vulnerability affects Let's Chat versions 0.3.0 through 0.4.8, allowing any authenticated user to archive any chat room on the server without proper ownership verification. This can lead to the permanent loss of access to private or password-protected rooms, as there is no application-level recovery mechanism, necessitating direct database intervention for restoration. Organizations using these versions should prioritize patching to mitigate the risk of unauthorized data manipulation and potential information loss.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows any authenticated user to archive any room on the server by sending a DELETE request to the rooms handler without ownership verification. Attackers can enumerate room IDs via the rooms listing endpoint and permanently archive private or password-protected rooms they cannot access, with no application-level recovery path requiring direct database intervention to restore.