Skip to content
OpenAdvisories

Package · npm

@eeacms/volto-chatbot

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    GHSA-w9x9-j56r-h98r

    @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy

    ## Unauthenticated Danswer API Confused Deputy Proxy in @eeacms/volto-chatbot ### Summary `@eeacms/volto-chatbot` exposes an Express middleware route (`**/_v1_da/**`) that accepts unauthenticated HTTP requests from any network client and proxies them to the c…

    @eeacms/volto-chatbot npm