CVE-2023-2887
Published May 25, 2023Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
Vendor/product archive
cbot / cbot_core CVEs
Beta · best-effort6 CVEs tagged to cbot / cbot_core — 3 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2023-2886
Published May 25, 2023Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation. This issue affects Chatbot: before Core: v4.0.3.4…
CVE-2023-2885
Published May 25, 2023Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM). This issue affects C…
CVE-2023-2884
Published May 25, 2023Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.…
CVE-2023-2883
Published May 25, 2023Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3…
CVE-2023-2882
Published May 25, 2023Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3…
Showing 1-6 of 6 CVEsPage 1 of 1