Skip to content
OpenAdvisories

Product · chatwoot

chatwoot/chatwoot

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.9
    CVE-2021-3742

    Server-Side Request Forgery (SSRF) in chatwoot/chatwoot

    A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.5.0. The vulnerability allows an attacker to upload an SVG file containing a malicious SSRF payload. When the SVG file is used as an avat…

    chatwoot chatwoot/chatwoot
  • High 7.8
    CVE-2021-3741

    Stored Cross-site Scripting (XSS) in chatwoot/chatwoot

    A stored cross-site scripting (XSS) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.6. The vulnerability occurs when a user uploads an SVG file containing a malicious XSS payload in the profile settings. When the avatar is…

    chatwoot chatwoot/chatwoot
  • High 7.6
    CVE-2022-2901

    Improper Authorization in chatwoot/chatwoot

    Improper Authorization in GitHub repository chatwoot/chatwoot prior to 2.8.

    chatwoot chatwoot/chatwoot
  • High 8.8
    CVE-2022-0542

    Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot

    Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0.

    chatwoot chatwoot/chatwoot
  • High 7.6
    CVE-2022-1021

    Insecure Storage of Sensitive Information in chatwoot/chatwoot

    Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0.

    chatwoot chatwoot/chatwoot
  • High 8.1
    CVE-2022-1022

    Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

    Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0.

    chatwoot chatwoot/chatwoot
  • High 7.3
    CVE-2022-0526

    Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

    Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.

    chatwoot chatwoot/chatwoot
  • High 7.5
    CVE-2021-3649

    Inefficient Regular Expression Complexity in chatwoot/chatwoot

    chatwoot is vulnerable to Inefficient Regular Expression Complexity

    chatwoot chatwoot/chatwoot