CVE-2021-44164: Unrestricted Upload of File with Dangerous Type

Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary code without authentication, in order to take control of the system or...

CVE-2021-44162: Improper Limitation of a Pathname to a Restricted Directory

Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication...

PT-2021-24058

Name of the Vulnerable Software and Affected Versions: Chain Sea ai chatbot system affected versions not specified Description: The issue is related to the file upload function in the Chain Sea ai chatbot system, which has insufficient filtering for special characters in URLs. This allows a remot...

PT-2021-24056

Name of the Vulnerable Software and Affected Versions: Chain Sea ai chatbot system affected versions not specified Description: The issue concerns a path traversal vulnerability in the specific file download function of the Chain Sea ai chatbot system. This vulnerability is due to improper...

Chain Sea Ai Chatbot System Path traversal vulnerability

Chain Sea Ai Chatbot System is an intelligent customer service software from Chain Sea, a Chinese company. An attacker could download arbitrary system files without authentication...