CVE-2022-2901

Description

References

• chatwoot/chatwoot commit 329e8c3 · Patch
• huntr.dev/bounties/cf46e0a6-f1b5-4959-a952-be9e4bac03fe · Exploit

Más vulnerabilidades de chatwoot

• CVE-2025-12246MEDIO 6.1A security flaw has been discovered in chatwoot up to 4.7.0. This issue affects some unknown processing of the file app/javascript/shared/co…
• CVE-2025-12245MEDIO 5.3A vulnerability was identified in chatwoot up to 4.7.0. This vulnerability affects the function initPostMessageCommunication of the file app…
• CVE-2024-0640MEDIO 4.8A stored cross-site scripting (XSS) vulnerability exists in chatwoot/chatwoot versions 3.0.0 to 3.5.1. This vulnerability allows an admin us…
• CVE-2025-21628ALTO 8.8Chatwoot is a customer engagement suite. Prior to 3.16.0, conversation and contact filters endpoints did not sanitize the input of query_ope…
• CVE-2021-3742ALTO 8.8A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.5.0. The vulnerabi…