PT-2023-21994 · Unknown · Cbot Chatbot
CVE-2023-2883
·
Publicado
2023-05-25
·
Atualizado
2026-05-22
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
CBOT Chatbot versions prior to Core: v4.0.3.4
CBOT Chatbot versions prior to Panel: v4.0.3.7
Description
The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, allowing for Authentication Abuse and Authentication Bypass.
Recommendations
For versions prior to Core: v4.0.3.4, update to Core: v4.0.3.4 or later.
For versions prior to Panel: v4.0.3.7, update to Panel: v4.0.3.7 or later.
Correção
IDOR
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cbot Chatbot