CVE-2024-58360 stoatchat before 0.7.8 Unrestricted Account Creation
Attackers can create unlimited unverified accounts due to missing restrictions, risking service integrity and denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-58360?
CVE-2024-58360 is a medium-severity vulnerability in stoatchat, published on 16 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and shield verification. Attackers can create unlimited accounts with unverified email addresses, increasing denial-of-service risk and compromising service integrity.
Weakness: CWE-1173
Which versions are affected by CVE-2024-58360?
How do I fix CVE-2024-58360?
No fix has been published for CVE-2024-58360 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-58360 being exploited?
There is no known exploitation of CVE-2024-58360 in the wild and no public exploit code.
Sources
Also known as GHSA-f26h-rqjq-qqjq, GHSA-x85w-r7mc-2chj.