CVE-2023-2887

概要

参考情報

• siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0293
• usom.gov.tr/bildirim/tr-23-0293 · Third Party Advisory

cbot core のその他の脆弱性

• CVE-2023-2886中 4.3Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation. This issue …
• CVE-2023-2885高 8.1Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in t…
• CVE-2023-2884緊急 9.8Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allow…
• CVE-2023-2883高 8.8Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This iss…
• CVE-2023-2882緊急 9.8Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatb…