Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-2886 EUVD-2023-34332GHSA-2f92-w7w3-5wxq

Cross-Site WebSocket Hijacking in CBOT's Chatbot

Published May 25, 2023 · Updated May 22, 2026 · Assigned by TR-CERT

Vendor: CBOT Product: Chatbot

Description

Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation.

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected products

VendorProductAffectedFixed
CBOT Chatbot < Core: v4.0.3.4 Panel: v4.0.3.7 Core: v4.0.3.4 Panel: v4.0.3.7

References