Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Ai3 Component: Qbibot Clear all filters
TI-2024-06671 CVE-2024-7204 · GHSA-3qp2-9c8g-2g8x

Ai3 QbiBot - Stored XSS

Priority LOW 27

Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00332 Published 2024-08-02 No fix listed CWE-79
TI-2024-03524 CVE-2024-3778 · GHSA-895x-rw6g-623x

Ai3 QbiBot - Unrestricted File Upload

Priority LOW 35

The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00641 Published 2024-04-15 No fix listed CWE-434
TI-2024-03523 CVE-2024-3777 · GHSA-v8f2-89xw-2297

Ai3 QbiBot - Broken Access Control

Priority MEDIUM 50

The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2024-04-15 No fix listed CWE-306