Approved changes feed: RSS · Atom
cpe:2.3:a:vastxie:99ai:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Vastxie (e7da160b-5edb-5351-8f9b-f9705310d708) |
|---|---|
| Product | 99Ai (6a3d285b-f366-564a-898f-72a888ed79b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111707 |
vulnerable | 2026-11-03 10:16:10.911411 |
99AI through 4.3.0 IDOR via /api/chatLog/querySingleChat Chat Message Disclosure
MEDIUM (5.3)
99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read other users' chat messages because querySingleChat lacks an owner check. Attackers can send a fingerprint header to obtain a visitor JWT and iterate sequential chatId values to retrieve other users' message content and task data.
Published: 2026-10-16T17:39:58.546Z
Updated: 2026-10-16T18:20:01.823Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111706 |
vulnerable | 2026-11-03 10:16:10.518632 |
99AI through 4.3.0 Unauthenticated Information Disclosure via chatLog exportExcel
HIGH (7.5)
99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing usernames, emails, prompts, and AI answers.
Published: 2026-10-16T17:39:57.886Z
Updated: 2026-10-16T21:16:51.203Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.