CVE-2004-2535: Matthew Phillips Sticker

Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days.

The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key.

Affected products

• Matthew Phillips Sticker: up to and including 3.1.0_beta_1; version 3.0.0 only

Published 2004-12-31. Last modified 2026-06-16.