CVE-2025-71377: stoatchat before 20250210-1 Unrestricted Message History Fetch
stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching messages 'nearby' another message, the database query can be given a message limit of zero, which the database interprets as 'no limit'. A remote unauthenticated attacker can craft nearby message fetch requests to download an entire channel's message history in a single expensive request, and can send many such requests in parallel, resulting in denial of service through resource exhaustion.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
stoatchatto a version that resolves this vulnerability.Fixed in 20250210-1 - Compensating control
Mitigate the denial-of-service risk by limiting or throttling unauthenticated/anonymous nearby message fetch requests (e.g., rate limit and concurrency limits for the messages route) to prevent parallel resource-exhaustion requests while the fix is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71377?
CVE-2025-71377 has a high severity rating of 8.7 as per the CVSS scoring.
How do I fix CVE-2025-71377?
To fix CVE-2025-71377, update stoatchat to version 20250210-1 (0.8.2) or later.
What type of vulnerability is CVE-2025-71377?
CVE-2025-71377 is an unrestricted message history fetching vulnerability allowing unauthorized access to message data.
Who is affected by CVE-2025-71377?
Users of stoatchat versions before 20250210-1 (0.8.2) are affected by CVE-2025-71377.
Can CVE-2025-71377 be exploited remotely?
Yes, CVE-2025-71377 can be exploited remotely by an unauthenticated attacker.