Read the docs

HiJiffy

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

HiJiffy records in CISA KEV

No HiJiffy vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-03709 CVE-2026-4263 · GHSA-vv27-wprx-cxj7

Incorrect authorization in HiJiffy Chatbot

Priority LOW 36

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/message'.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00271 Published 2026-03-26 No fix listed CWE-863
TI-2026-03708 CVE-2026-4262 · GHSA-93cj-9g5c-fr4x

Incorrect authorization in HiJiffy Chatbot

Priority LOW 36

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/<ID>/'.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00249 Published 2026-03-26 No fix listed CWE-863
Open these records in search →