Chatbot vulnerabilities

5 known vulnerabilities in Chatbot from Cbot. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Chatbot: Authentication Bypass by Spoofing

  CVE-2023-2887May 25, 2023Cbot

  Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

• 8.1 High severity

  Chatbot: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

  CVE-2023-2885May 25, 2023Cbot

  Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM). This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

• 9.8 Critical severity

  Chatbot: Use of Insufficiently Random Values

  CVE-2023-2884May 25, 2023Cbot

  Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

• 8.8 High severity

  Chatbot: Authorization Bypass Through User-Controlled Key

  CVE-2023-2883May 25, 2023Cbot

  Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

• 9.8 Critical severity

  Chatbot: Generation of Incorrect Security Tokens

  CVE-2023-2882May 25, 2023Cbot

  Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.