ON24 Q&A chat vulnerabilities

1 known vulnerability in ON24 Q&A chat from ON24. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  ON24 Q&A chat: Authorization Bypass Through User-Controlled Key

  CVE-2026-3321Mar 30, 2026ON24

  A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/{EVENTID}/{TIMESTAMP}/' endpoint. Exploiting this vulnerability would allow an unauthenticated attacker to enumerate event IDs and obtain the complete Q&A