Skip to content
OpenAdvisories

Product · danswer-ai

danswer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-32881

    Unauthorized access to GET/SET of Slack Bot Tokens in Danswer

    Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the cus…

    danswer-ai danswer