Skip to content
OpenAdvisories

Vendor

zhimaAi

4 known vulnerabilities.

Products

chatwiki 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-123782

    ChatWiki before 2.10.0 Cross-Tenant IDOR via SaveFormField and UpdateFormRequired

    ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability in SaveFormField and UpdateFormRequired that allows authenticated users to modify other tenants' form fields. Attackers can pass their own form_id to satisfy the ownership check…

    zhimaAi chatwiki
  • Medium 5.4
    CVE-2026-123624

    ChatWiki before 2.10.0 Cross-Tenant Fast Command Modification via saveFastCommand

    ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify other tenants' fast commands by supplying arbitrary sequential ids to POST /manage/saveFastCommand. Attackers can overwrite another ten…

    zhimaAi chatwiki
  • Medium 5.4
    CVE-2026-111656

    ChatWiki through 2.9.6 Cross-Tenant IDOR via Form Filter Management Endpoints

    ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authenticated users to access another tenant's form filters by supplying arbitrary form_id values. Attackers can send sequential form_id values to getFormFilterList,…

    zhimaAi chatwiki