← CVE Intelligence

CVE-2021-44162

Chain Sea Information Integration Co., Ltd ai chatbot system - Path Traversal PUBLISHED

Description (CNA)

Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication.

Affected (CNA)

Vendor / productVersions
Chain Sea Information Integration Co., Ltd / ai chatbot systemunknown 0

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.