PT-2023-21994 · Unknown · Cbot Chatbot
CVE-2023-2883
·
Published
2023-05-25
·
Updated
2026-05-22
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
CBOT Chatbot versions prior to Core: v4.0.3.4
CBOT Chatbot versions prior to Panel: v4.0.3.7
Description
The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, allowing for Authentication Abuse and Authentication Bypass.
Recommendations
For versions prior to Core: v4.0.3.4, update to Core: v4.0.3.4 or later.
For versions prior to Panel: v4.0.3.7, update to Panel: v4.0.3.7 or later.
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cbot Chatbot