Skip to content
OpenAdvisories

Vendor

chatwoot

21 known vulnerabilities.

Products

chatwoot/chatwoot 14 chatwoot 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-21628

    Chatwoot has a Blind SQL-injection in Conversation and Contacts filters

    Chatwoot is a customer engagement suite. Prior to 3.16.0, conversation and contact filters endpoints did not sanitize the input of query_operator passed from the frontend or the API. This provided any actor who is authenticated, an attack vector to run arbitr…

    chatwoot chatwoot
  • Critical 9.4
    CVE-2022-3741

    Improper Restriction of Excessive Authentication Attempts in chatwoot/chatwoot

    Impact varies for each individual vulnerability in the application. For generation of accounts, it may be possible, depending on the amount of system resources available, to create a DoS event in the server. These accounts still need to be activated; however,…

    chatwoot chatwoot/chatwoot