Read the docs

Ai3

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Ai3 records in CISA KEV

No Ai3 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Qbibot 3 records MEDIUM

Records

3 records in Qbibot · all components

TI-2024-03523 CVE-2024-3777 · GHSA-v8f2-89xw-2297

Ai3 QbiBot - Broken Access Control

Priority MEDIUM 50

The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2024-04-15 No fix listed CWE-306
TI-2024-03524 CVE-2024-3778 · GHSA-895x-rw6g-623x

Ai3 QbiBot - Unrestricted File Upload

Priority LOW 35

The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00641 Published 2024-04-15 No fix listed CWE-434
TI-2024-06671 CVE-2024-7204 · GHSA-3qp2-9c8g-2g8x

Ai3 QbiBot - Stored XSS

Priority LOW 27

Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00332 Published 2024-08-02 No fix listed CWE-79
Open these records in search →