Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-3777

Ai3 QbiBot - Broken Access Control

Description

The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ai3 QbiBot

Default version status: unaffected

  • earlier to ≤ 8.0.4affected

References