Re:Warning: Do not use Hive Social
by spindle on Wednesday November 30, 2022 @07:15PM
(#33810188)
summary quotes:
> The issues we reported allow any attacker to access all data, including private posts, private messages, shared media and even deleted direct messages. This also includes private email addresses and phone numbers entered during login.
> Attackers can also overwrite data such as posts owned by other users
> The issues we reported allow any attacker to access all data, including private posts, private messages, shared media and even deleted direct messages. This also includes private email addresses and phone numbers entered during login.
> Attackers can also overwrite data such as posts owned by other users