medium4.3
CVE-2023-2886
Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation.
Impact
Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cbot | Cbot Core | before 4.0.3.4 |
| Cbot | Cbot Panel | before 4.0.3.7 |