Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple vulnerabilities in 1millionbot Millie chatbot
Vulnerability Description
Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID. The vulnerability is present in the endpoint 'api.1millionbot.com/api/public/conversations/' and, if exploited, could allow a remote attacker to access other users private chatbot conversations, revealing sensitive or confidential data without requiring credentials or impersonating users. In order for the vulnerability to be exploited, the attacker must have the user's conversation ID.
CVSS Information
N/A
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
1millionbot Millie chatbot 安全漏洞
Vulnerability Description
1millionbot Millie chatbot是西班牙1millionbot公司的一个提供智能对话与自动化客户服务能力的聊天机器人系统。 1millionbot Millie chatbot存在安全漏洞，该漏洞源于api.1millionbot.com/api/public/conversations/端点允许通过更改对话ID查看其他用户的私人对话，可能导致不安全的直接对象引用。
CVSS Information
N/A
Vulnerability Type
N/A