PT-2021-24058

Name of the Vulnerable Software and Affected Versions: Chain Sea ai chatbot system affected versions not specified Description: The issue is related to the file upload function in the Chain Sea ai chatbot system, which has insufficient filtering for special characters in URLs. This allows a remot...

PT-2021-24056

Name of the Vulnerable Software and Affected Versions: Chain Sea ai chatbot system affected versions not specified Description: The issue concerns a path traversal vulnerability in the specific file download function of the Chain Sea ai chatbot system. This vulnerability is due to improper...

CVE-2021-44164: Unrestricted Upload of File with Dangerous Type

Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary code without authentication, in order to take control of the system or...

CVE-2021-44162: Improper Limitation of a Pathname to a Restricted Directory

Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication...

Chain Sea Ai Chatbot System 路径遍历漏洞

Chain Sea Ai Chatbot System is an intelligent customer service software from Chain Sea, a Chinese company. An attacker could download arbitrary system files without authentication...