CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2021-44164
Severity
CRITICAL
CVSS
9.8
EPSS
2.05%
Original NVD Description
Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary code without authentication, in order to take control of the system or terminate service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)