Description
即时通讯系统存在信息泄露漏洞，远程攻击者可通过未授权接口获取认证码，进而获取到系统敏感信息。
即时通讯系统存在信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/adysec/POC/blob/main/wpoc/%E7%BD%91%E5%8A%A8%E7%BB%9F%E4%B8%80%E9%80%9A%E4%BF%A1%E5%B9%B3%E5%8F%B0/%E7%BD%91%E5%8A%A8%E7%BB%9F%E4%B8%80%E9%80%9A%E4%BF%A1%E5%B9%B3%E5%8F%B0(ActiveUC)%E6%8E%A5%E5%8F%A3iactiveEnterMeeting%E5%AD%98%E5%9C%A8%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md
https://www.gm7.org/archives/42106
https://www.easemob.com/news/13728
https://zhuanlan.zhihu.com/p/24834367
https://developer.aliyun.com/article/406207
https://www.secrss.com/articles/78797
https://www.anquanke.com/post/id/208678
https://baike.baidu.com/item/%E6%95%8F%E6%84%9F%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E/67248161
https://www.im8000.com/html/xtKnowledge/productknowledge/701.html