• info
• discussion
• exploit
• solution
• references

OpenBB Private Message Disclosure Vulnerability

It has been reported that OpenBB is affected by a private message disclosure vulnerability. This issue is due to a design error that fails to validate user credentials.

This issue might allow an attacker to read arbitrary private messages posted to the bulletin board; limiting confidentiality.