CyberRota Analysis
AI-GeneratedA vulnerability exists in the Signed File Download Endpoint of sdcb chats versions up to 1.12.0, allowing for missing authentication in the DownloadPublic function. Although the attack's complexity is high and exploitation is considered difficult, remote attackers could potentially exploit this flaw. Organizations using affected versions should prioritize remediation to mitigate the risk of unauthorized access to sensitive files.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possible. The attack's complexity is rated as high. The exploitability is said to be difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.