Approved changes feed: RSS · Atom
cpe:2.3:a:danswer-ai:danswer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Danswer Ai (b9bdfe6c-3643-588d-b4c8-a8ab238dc8a6) |
|---|---|
| Product | Danswer (f9d1b368-19a8-55a3-b048-49321b6f9eea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-32881 |
vulnerable | 2026-06-08 06:37:24.640567 |
Unauthorized access to GET/SET of Slack Bot Tokens in Danswer
CRITICAL (9.8)
Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the customer's slack bot, leading to internal Slack access. This issue was patched in version 3.63.
Published: 2024-04-26T20:46:33.551Z
Updated: 2024-08-02T02:20:35.603Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.