Skip to content
OpenAdvisories

Product · OtterMind

Chat2DB

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-63307

    Chat2DB < 5.3.0 Insecure Direct Object Reference via GET /api/connection/datasource

    Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/{id} endpoint. The handler calls dataSourceService.queryExistent(id, ...) without an ownership check and returns the decrypted password field…

    OtterMind Chat2DB