Skip to content
OpenAdvisories
High · 8.1 CVE-2023-2885 EUVD-2023-34331GHSA-788j-v5xm-h2mq

Channel Accessible by Non-Endpoint in CBOT's Chatbot

Published May 25, 2023 · Updated May 22, 2026 · Assigned by TR-CERT

Description

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM).

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected products

VendorProductAffectedFixed
CBOT Chatbot < Core: v4.0.3.4 Panel: v4.0.3.7 Core: v4.0.3.4 Panel: v4.0.3.7

References