Approved changes feed: RSS · Atom
cpe:2.3:a:cbot:chatbot:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cbot (9f3a93e1-eabf-5b08-bd8a-398f5451c7b7) |
|---|---|
| Product | Chatbot (65d93963-a8b5-5331-8d04-acf6b5a7624c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-2887 |
vulnerable | 2026-06-08 06:02:43.602699 |
User Authentication Bypass in CBOT's Chatbot
CRITICAL (9.8)
Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass.
This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
Published: 2023-05-25T08:33:34.404Z
Updated: 2026-05-22T10:46:31.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2886 |
vulnerable | 2026-06-08 06:02:43.602304 |
Cross-Site WebSocket Hijacking in CBOT's Chatbot
MEDIUM (4.3)
Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation.
This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
Published: 2023-05-25T08:31:24.499Z
Updated: 2026-05-22T10:47:48.190Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2885 |
vulnerable | 2026-06-08 06:02:43.601778 |
Channel Accessible by Non-Endpoint in CBOT's Chatbot
HIGH (8.1)
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM).
This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
Published: 2023-05-25T08:28:56.312Z
Updated: 2026-05-22T10:48:57.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2884 |
vulnerable | 2026-06-08 06:02:43.601342 |
Insecure Randomness in CBOT's Chatbot
CRITICAL (9.8)
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.
This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
Published: 2023-05-25T08:26:39.535Z
Updated: 2026-05-22T10:50:01.793Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2883 |
vulnerable | 2026-06-08 06:02:43.600790 |
IDOR in CBOT's Chatbot
HIGH (8.8)
Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.
This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
Published: 2023-05-25T08:20:44.289Z
Updated: 2026-05-22T10:51:17.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2882 |
vulnerable | 2026-06-08 06:02:43.598314 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.