Skip to content
OpenAdvisories

Product · baptisteArno

typebot.io

34 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter

    TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's the findResult query does not filter results by typebotId, allowing an authenticated user to load result data (user answers, variable values) from a different typebot by supplyi…