Cbot Panel Security Vulnerabilities and Issues — Cbot Panel CVE List

Lucene search

CbotCbot Panel

6 matches found

CVE•added 2023/05/25 9:15 a.m.•48 views

CVE-2023-2885

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM).This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

8.1CVSS8.2AI score0.00076EPSS

CVE•added 2023/05/25 9:15 a.m.•40 views

CVE-2023-2882

Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

9.8CVSS9.6AI score0.00082EPSS

CVE•added 2023/05/25 9:15 a.m.•40 views

CVE-2023-2886

Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

4.3CVSS4.7AI score0.00051EPSS

CVE•added 2023/05/25 9:15 a.m.•39 views

CVE-2023-2887

Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

9.8CVSS9.6AI score0.00021EPSS

CVE•added 2023/05/25 9:15 a.m.•35 views

CVE-2023-2883

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

8.8CVSS8.8AI score0.00018EPSS

CVE•added 2023/05/25 9:15 a.m.•33 views

CVE-2023-2884

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

9.8CVSS9.6AI score0.00098EPSS