Thesamur Embedai
9 CVEs affecting Thesamur Embedai. Latest disclosed: 2025-01-30. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-0747 | High | 8.6 | 2025-01-30 | A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript cod… |
CVE-2025-0740 | High | 8.6 | 2025-01-30 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain chat messages… |
CVE-2025-0739 | High | 8.6 | 2025-01-30 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to show subscription's in… |
CVE-2025-0745 | High | 7.5 | 2025-01-30 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of… |
CVE-2025-0744 | High | 7.5 | 2025-01-30 | an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker change his subscription p… |
CVE-2025-0746 | Medium | 6.1 | 2025-01-30 | A Reflected Cross-Site Scripting vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to craft a maliciou… |
CVE-2025-0742 | Medium | 5.8 | 2025-01-30 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain files stored by… |
CVE-2025-0741 | Medium | 5.8 | 2025-01-30 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to write messages into… |
CVE-2025-0743 | Medium | 5.3 | 2025-01-30 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to leverage the endpoint… |