Chinasea Qb Smart Service Robot
3 CVEs affecting Chinasea Qb Smart Service Robot. Latest disclosed: 2021-12-20. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-44164 | Critical | 9.8 | 2021-12-20 | Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file ty… |
CVE-2021-44162 | High | 7.5 | 2021-12-20 | Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in UR… |
CVE-2021-44163 | Medium | 6.1 | 2021-12-20 | Chain Sea ai chatbot backend has improper filtering of special characters in URL parameters, which allows a remote attacker to perform JavaScript injection for… |