Ai3 Qbibot
3 CVEs affecting Ai3 Qbibot. Latest disclosed: 2024-08-02. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3777 | Critical | 9.8 | 2024-04-15 | The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password. |
CVE-2024-3778 | High | 7.2 | 2024-04-15 | The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to uploa… |
CVE-2024-7204 | Medium | 6.1 | 2024-08-02 | Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once the recipient views… |