CVE:CVE-2023-2885
CNNVD:CNNVD-202305-2180
CBOT Chatbot是CBOT公司的一个人工智能驱动的实时聊天解决方案。
CBOT Chatbot Core v4.0.3.4 之前版本、 Panel v4.0.3.7之前版本存在安全漏洞，该漏洞源于非端点可访问通道允许中间人攻击。
solution:Upgrade cbot cbot_core to a higher version than 4.0.3.4,and avoid the version (,4.0.3.4); Upgrade cbot cbot_panel to a higher version than 4.0.3.7,and avoid the version (,4.0.3.7)