Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-2886

Cross-Site WebSocket Hijacking in CBOT's Chatbot

Description

Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CBOT Chatbot

Default version status: unaffected

  • 0 to < Core: v4.0.3.4 Panel: v4.0.3.7affected

References