CVE-2023-2882

Published: May 25, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD (Secondary)

Description

Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected (2)

Products: Cbot: Cbot Core, Cbot Panel

Cbot

2 products

Cbot Core

Cbot Panel

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cbot Cbot Core	Before 4.0.3.4
Cbot Cbot Panel	Before 4.0.3.7

Related CWEs

CWE-1270

Generation of Incorrect Security Tokens

The product implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Tokens generated in the system are incorrect.

References (3)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0293

Source: iletisim@usom.gov.tr

https://www.usom.gov.tr/bildirim/tr-23-0293

Source: iletisim@usom.gov.tr

Third Party Advisory

https://www.usom.gov.tr/bildirim/tr-23-0293

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.