Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: HiJiffy Clear all filters
TI-2026-03709 CVE-2026-4263 · GHSA-vv27-wprx-cxj7

Incorrect authorization in HiJiffy Chatbot

Priority LOW 36

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/message'.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00271 Published 2026-03-26 No fix listed CWE-863
TI-2026-03708 CVE-2026-4262 · GHSA-93cj-9g5c-fr4x

Incorrect authorization in HiJiffy Chatbot

Priority LOW 36

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/<ID>/'.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00249 Published 2026-03-26 No fix listed CWE-863