Thesamur
Thesamur Embedai: vulnerabilidades y CVE
Thesamur Embedai tiene 10 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-0747 | Media (5.4) | 0.24% | — | 30 ene 2025 | A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript code into a message that will be executed when a user opens the… |
| CVE-2025-0746 | Media (5.4) | 0.22% | — | 30 ene 2025 | A Reflected Cross-Site Scripting vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to craft a malicious URL leveraging the"/embedai/users/show/<SCRIPT>" endpoint… |
| CVE-2025-0745 | Media (6.5) | 0.32% | — | 30 ene 2025 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of the database by requesting the… |
| CVE-2025-0744 | Media (6.5) | 0.27% | — | 30 ene 2025 | an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker change his subscription plan without paying by making a POST request changing the… |
| CVE-2025-0743 | Media (4.3) | 0.34% | — | 30 ene 2025 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to leverage the endpoint "/embedai/visits/show/<VISIT_ID>" to obtain information… |
| CVE-2025-0742 | Media (6.5) | 0.28% | — | 30 ene 2025 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain files stored by others users by changing the "FILE_ID" of the endpoint… |
| CVE-2025-0741 | Media (4.3) | 0.24% | — | 30 ene 2025 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to write messages into other users chat by changing the parameter "chat_id" of the… |
| CVE-2025-0740 | Media (6.5) | 0.34% | — | 30 ene 2025 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain chat messages belonging to other users by changing the “CHAT_ID” of the… |
| CVE-2025-0739 | Media (6.5) | 0.34% | — | 30 ene 2025 | An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to show subscription's information of others users by changing the "SUSCBRIPTION_ID"… |
| CVE-2024-5185 | Alta (8.3) | 0.16% | — | 29 may 2024 | The EmbedAI application is susceptible to security issues that enable Data Poisoning attacks. This weakness could result in the application becoming compromised, leading to unauthorized entries or data poisoning… |