| शीर्षक | Chatwoot * Origin Validation Error |
|---|
| विवरण | An unrestricted postMessage vulnerability in Chatwoot widget integrations allows attackers to hijack the cw_conversation token via a crafted message. With one click, an attacker can steal this token and retrieve the full conversation history of a victim, potentially exposing sensitive information. The embedded widget listens to postMessage events without validating the origin of the sender.
A malicious site can send a forged postMessage with the event popoutChatWindow, specifying a malicious baseUrl. Without validating the message origin, the widget directly calls popoutChatWindow with the supplied baseUrl. This function builds a popup URL that includes the cw_conversation cookie value as a parameter and opens it. The attacker can intercept the popup into their own controlled window and capture the cw_conversation token directly from the request URL. |
|---|
| स्रोत | ⚠️ https://hckwr.com/blog/multiple-vulnerabilities-in-chatwoot/ |
|---|
| उपयोगकर्ता | fpatrik (UID 9157) |
|---|
| सबमिशन | 12/10/2025 02:55 PM (12 महीनों पहले) |
|---|
| संयम | 26/10/2025 06:12 AM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 329916 [chatwoot तक 4.7.0 Widget IFrameHelper.js initPostMessageCommunication baseUrl अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|