CVE-2023-2884

概要

参考情報

• siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0293
• usom.gov.tr/bildirim/tr-23-0293 · Third Party Advisory

cbot core のその他の脆弱性

• CVE-2023-2887緊急 9.8Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass. This issue affects Chatbot: before Core: v4.0…
• CVE-2023-2886中 4.3Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation. This issue …
• CVE-2023-2885高 8.1Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in t…
• CVE-2023-2883高 8.8Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This iss…
• CVE-2023-2882緊急 9.8Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatb…