Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Chain Sea Information Integration Co., Ltd Component: Qb Smart Service Robot Clear all filters
TI-2021-19862 CVE-2021-44164 · GHSA-pv5h-978v-cqvr

Chain Sea Information Integration Co., Ltd ai chatbot system - Arbitrary File Upload

Priority MEDIUM 46

Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02122 Published 2021-12-20 No fix listed CWE-434
TI-2021-19861 CVE-2021-44163 · GHSA-wxf3-qxfw-xchv

Chain Sea Information Integration Co., Ltd ai chatbot system - Reflected XSS

Priority LOW 29

Chain Sea ai chatbot backend has improper filtering of special characters in URL parameters, which allows a remote attacker to perform JavaScript injection for XSS (reflected Cross-site scripting) attack without authenti…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2021-12-20 No fix listed CWE-79