Cbot - vulnerabilities (CVEs)
6 CVEs in 3 products, 0 in the last 30 days, newest from 2023-05-25.
Products
- Cbot Core - 6 CVEs
- Cbot Panel - 6 CVEs
- Chatbot - 6 CVEs
Newest CVEs of Cbot
- CVE-2023-2884 - CVSS 9.8 (critical), 2023-05-25: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature…
- CVE-2023-2887 - CVSS 9.8 (critical), 2023-05-25: Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
- CVE-2023-2883 - CVSS 8.8 (high), 2023-05-25: Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot:…
- CVE-2023-2886 - CVSS 4.3 (medium), 2023-05-25: Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation. This issue affects Chatbot:…
- CVE-2023-2882 - CVSS 9.8 (critical), 2023-05-25: Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core:…
- CVE-2023-2885 - CVSS 8.1 (high), 2023-05-25: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM).…
