Read the docs
TI-2026-45153 Aliases CVE-2026-63307GHSA-6h56-q7r6-j7xg

Chat2DB < 5.3.0 Insecure Direct Object Reference via GET /api/connection/datasource

Priority LOW 31CWE-639Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-639.

Summary

Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/{id} endpoint. The handler calls dataSourceService.queryExistent(id, ...) without an ownership check and returns the decrypted password field, allowing any authenticated non-admin user to enumerate datasource IDs and read the plaintext database credentials of datasources owned by other users.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00402 34th percentileScored 2026-11-07
Fix Fixed Chat2DB (OtterMind): 5.3.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OtterMindChat2DBbefore 5.3.05.3.0Patch availableCNA
  • Chat2DB VendorOtterMind Affected before 5.3.0 Fixed in 5.3.0 Patch available CNA

Remediation

  • Fix · CNA Chat2DB (OtterMind) Fixed in 5.3.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-63307
  2. 2026-10-03 Alias added: GHSA-6h56-q7r6-j7xg

References

Other 2

  • TI-2026-75487 OtterMind Nubase Missing Authentication in Storage Object API CVSS 4.0HIGH 8.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences