SECutiee / ScanChat-api

GNU General Public License v3.0
0 stars 0 forks source link

Missing encryption for potentially private chatrooms #4

Open Akira1906 opened 4 months ago

Akira1906 commented 4 months ago

There is no confidentiality for data in the database. It is stored in plaintext and everybody can read the data even if they are not supposed to.

An attacker can read all chatroom information.

An attacker can send get requests for all available chatrooms.