CVE-2023-2885: Cbot Core

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM). This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected products

• Cbot Cbot Core: before 4.0.3.4 (fixed in 4.0.3.4)
• Cbot Cbot Panel: before 4.0.3.7 (fixed in 4.0.3.7)

Published 2023-05-25. Last modified 2026-06-17.