CVE-2019-14367: Slack-Chat Project Slack-Chat

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Slack-Chat through 1.5.5 leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack (channels, members, etc.).

Affected products

• Slack-Chat Project Slack-Chat: up to and including 1.5.5

Published 2019-11-12. Last modified 2026-06-17.