Description
Converse.js and Inverse.js through 3.3 allow remote attackers to obtain sensitive information because it is too difficult to determine whether safe publication of private data was configured or even intended.
Recommendation
Update the converse.js package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.3.3
- Patched version(s): 3.3.3
References
Could your website be exposed too?
SmartScanner can check your website for Converse.js Exposure of Sensitive Information and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Sensitive Data Exposure in msrcrypto - CVE-2018-8319
- Exposure of Sensitive Information in eventsource - CVE-2022-1650
- Exposure of Sensitive Information to an Unauthorized Actor in nanoid - CVE-2021-23566
- @kilocode/cli Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - CVE-2026-8766
You might also like:
See something that needs correcting? Let us knowUpdated October 06, 2023