201 matches found
chatwoot 授权问题漏洞
chatwoot is a software application. Customer Engagement Suite, an open source alternative to Intercom, Zendesk, Salesforce Service Cloud, and more. A vulnerability in authorization issues exists in versions prior to chatwoot 2.8, which stems from incorrect authorization...
CVE-2022-0542
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
CVE-2022-0542
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
CVE-2022-0542
CVE-2022-0542 is a DOM-based XSS in chatwoot/chatwoot prior to version 2.7.0. Attackers can inject malicious script via user-controlled content (e.g., markdown/links) that is rendered in the DOM, enabling arbitrary JS execution. Public sources confirm the issue affects chatwoot/chatwoot before 2....
CVE-2022-0542 Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
CVE-2022-0542 Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
CVE-2022-1021
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
Information disclosure
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
CVE-2022-1021
CVE-2022-1021 affects chatwoot/chatwoot prior to 2.6.0 with insecure storage of sensitive information. The connected documents corroborate this, citing risks around exposure of sensitive data (e.g., authentication-related data) and, in some sources, a cross-site scripting vector that can enable t...
CVE-2022-1021 Insecure Storage of Sensitive Information in chatwoot/chatwoot
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
chatwoot 跨站脚本漏洞
chatwoot is a software application. Customer engagement suite, open source alternative to Intercom, Zendesk, Salesforce Service Cloud and more. A cross-site scripting vulnerability exists in versions prior to chatwoot 2.7.0. An attacker exploits this vulnerability to perform cross-site scripting...
PT-2022-13596 · Chatwoot · Chatwoot
Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.6.0 Description: The issue concerns insecure storage of sensitive information in the GitHub repository chatwoot/chatwoot. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to...
chatwoot 跨站脚本漏洞
chatwoot is a software application. Customer Engagement Suite, an open source alternative to Intercom, Zendesk, Salesforce Service Cloud and more. A cross-site scripting vulnerability exists in versions prior to chatwoot 2.6.0 that stems from insecure storage of sensitive information...
PT-2022-13252 · Chatwoot · Chatwoot
Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.7.0 Description: The issue is related to Cross-site Scripting XSS - DOM, which occurs when an application includes user input in its output without proper validation or escaping, allowing an attacker to...
Chatwoot's Misconfigured Rack_Attack.rb Does Not Appropriately Protect Against Brute Force Attacks
Description Chatwoot relies on the rackattack.rb file to defend the application against various brute force attacks. The Chatwoot application fails to prevent brute force attacks against the listed paths when strings are appended to the end of POST directory names. Some protection still exists,...
chatwoot cross-site scripting vulnerability
chatwoot is an application. Customer engagement suite, an open source alternative to intercom, Zendesk, Salesforce Service Cloud, etc. chatwoot suffers from a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An...
CVE-2022-1022
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...