CVE-2021-44162
Chain Sea Information Integration Co., Ltd ai chatbot system - Path Traversal
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Dec 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Chain Sea Information Integration Co., Ltd · ai chatbot systemWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →