Read the docs

Chain Sea Information Integration Co., Ltd

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Chain Sea Information Integration Co., Ltd records in CISA KEV

No Chain Sea Information Integration Co., Ltd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Qb Smart Service Robot 3 records MEDIUM

Records

3 records

TI-2021-19862 CVE-2021-44164 · GHSA-pv5h-978v-cqvr

Chain Sea Information Integration Co., Ltd ai chatbot system - Arbitrary File Upload

Priority MEDIUM 46

Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02122 Published 2021-12-20 No fix listed CWE-434
TI-2021-19861 CVE-2021-44163 · GHSA-wxf3-qxfw-xchv

Chain Sea Information Integration Co., Ltd ai chatbot system - Reflected XSS

Priority LOW 29

Chain Sea ai chatbot backend has improper filtering of special characters in URL parameters, which allows a remote attacker to perform JavaScript injection for XSS (reflected Cross-site scripting) attack without authenti…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2021-12-20 No fix listed CWE-79
Open these records in search →