Описание
Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:chinasea:qb_smart_service_robot:-:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00423
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
около 4 лет назад
Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication.
EPSS
Процентиль: 62%
0.00423
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-22