Stoatchat Unrestricted Account Creation Vulnerability

A vulnerability exists in Stoatchat versions prior to 0.7.8, allowing unrestricted account creation. The application fails to enforce essential account creation protocols such as invite-only mode, email verification, captcha, and shield verification. This oversight enables attackers to generate an unlimited number of accounts using unverified email addresses, which could lead to increased denial-of-service risks and undermine the integrity of the service.

Impact

The vulnerability allows for unrestricted account creation, bypassing verification processes. This can lead to a higher risk of denial-of-service attacks and compromise the overall integrity of the service.

Remediation

Users can upgrade to Stoatchat version 0.7.8 or downgrade to version 0.6.13. The patch for this vulnerability is included in the 0.7.8 release.