modified Kik client USES chat-room privilege escalation
XML stanza injection could cause a user to be given chat-room administrator ability.
Explicit Confidence 99% · Azrael EP 93 Details
“this user was just given admin. Then you have admin ability”
Technique
technique:chat_room_privilege_escalation
Also: unauthorized admin ability
A Kik client abuse in which a crafted stanza could cause a user to receive administrator privileges in a chat room.
A Kik client abuse in which a crafted stanza could cause a user to receive administrator privileges in a chat room.
“this user was just given admin”
“You can just take over any chat room any time”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | modified Kik client | Explicit | 93 |
modified Kik client USES chat-room privilege escalation
XML stanza injection could cause a user to be given chat-room administrator ability.
Explicit Confidence 99% · Azrael EP 93 Details
“this user was just given admin. Then you have admin ability”