Skip to content
OpenAdvisories

Vendor

1millionbot

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.0

    Multiple vulnerabilities in 1millionbot Millie chatbot

    Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID. The vulnerability is present in the endpoint 'api.1millionbot.com/api/public…

  • High 8.7

    Multiple vulnerabilities in 1millionbot Millie chatbot

    Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a question in such a way that, upon receiving an affirmative response ('true'), the …