Skip to content
OpenAdvisories
High · 8.8 CVE-2023-2883 EUVD-2023-34329GHSA-jm8f-qrph-485q

IDOR in CBOT's Chatbot

Published May 25, 2023 · Updated May 22, 2026 · Assigned by TR-CERT

Description

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected products

VendorProductAffectedFixed
CBOT Chatbot < Core: v4.0.3.4 Panel: v4.0.3.7 Core: v4.0.3.4 Panel: v4.0.3.7

References