SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can a…

Published:

15 januari 2026 om 23:00:00

Alert date:

16 januari 2026 om 16:17:23

Source:

nvd.nist.gov

Enterprise Applications, Web Technologies

SmarterTrack version 7922 contains an information disclosure vulnerability in the Chat Management search form. The vulnerability allows attackers to access the /Management/Chat/frmChatSearch.aspx endpoint to retrieve sensitive agent identification details including first names, last names, and unique identifiers. This represents a privacy and security risk as it exposes internal staff information to unauthorized parties.

Technical details

Mitigation steps:

Affected products:

SmarterTrack