← CVE Intelligence

CVE-2023-2886

Cross-Site WebSocket Hijacking in CBOT's Chatbot PUBLISHED

Description (CNA)

Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected (CNA)

Vendor / productVersions
CBOT / Chatbotaffected 0 before Core: v4.0.3.4 Panel: v4.0.3.7

CWE

CWE-1385

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.