CVE-2023-2883: Cbot Core

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected products

• Cbot Cbot Core: before 4.0.3.4 (fixed in 4.0.3.4)
• Cbot Cbot Panel: before 4.0.3.7 (fixed in 4.0.3.7)

Published 2023-05-25. Last modified 2026-06-17.