Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Access Control vulnerability in EmbedAI
Vulnerability Description
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of the database by requesting the "/embedai/app/uploads/database/<SQL_FILE>" endpoint.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
访问控制不恰当
Vulnerability Title
EmbedAI 安全漏洞
Vulnerability Description
EmbedAI是EmbedAI公司的一个平台，使用户能够使用他们的数据创建由 ChatGPT 提供支持的 AI 聊天机器人。 EmbedAI 2.1版本及之前版本存在安全漏洞，该漏洞源于访问控制不当。
CVSS Information
N/A
Vulnerability Type
N/A