CVE-2024-58360 | stoatchat versions before 0.7.8 fail to enforce account crea… | CVSS 6.5 MEDIUM

Description

stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and shield verification. Attackers can create unlimited accounts with unverified email addresses, increasing denial-of-service risk and compromising service integrity.

Metadata

CVE ID: CVE-2024-58360
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-07-16 12:22 UTC
Published: 2026-07-16 12:23 UTC
Last updated: 2026-07-16 12:23 UTC
Primary CWE: CWE-1173
Improper Use of Validation Framework
Vendor / Product: stoatchat / stoatchat
Sources: cve.org · NVD

Severity & Metrics

6.5 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Affected products (1)

Vendor	Product	Platform	Versions
stoatchat	stoatchat	—	0 < 0.7.8, 0.7.8

Weakness (CWE)

CWE	Source	Description
CWE-1173	cna	Improper Use of Validation Framework

CVSS scores (2)

Score	Severity	Version	Source	Vector
6.9	MEDIUM	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
6.5	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

References (3)

GitHub Security Advisory (GHSA-f26h-rqjq-qqjq) https://github.com/stoatchat/stoatchat/security/advisories/GHSA-f26h-rqjq-qqjq
https://github.com/stoatchat/stoatchat/commit/eda36436a862bcab92f7ac2cf1c2dd88c41e52a4 https://github.com/stoatchat/stoatchat/commit/eda36436a862bcab92f7ac2cf1c2dd88c41e52a4
VulnCheck Advisory: stoatchat before 0.7.8 Unrestricted Account Creation https://www.vulncheck.com/advisories/stoatchat-before-unrestricted-account-creation