Skip to content
OpenAdvisories

Vendor

vastxie

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    99AI through 4.3.0 Unauthenticated Information Disclosure via chatLog exportExcel

    99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fiel…