CyberRota Analysis
AI-GeneratedChat2DB versions prior to 5.3.0 are vulnerable due to an insecure direct object reference in the GET /api/connection/datasource/{id} endpoint, which allows authenticated non-admin users to access and enumerate datasource IDs. This flaw enables unauthorized access to plaintext database credentials, posing a risk of data exposure and potential compromise of sensitive information. Organizations using affected versions should prioritize remediation to protect against unauthorized data access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/{id} endpoint. The handler calls dataSourceService.queryExistent(id, ...) without an ownership check and returns the decrypted password field, allowing any authenticated non-admin user to enumerate datasource IDs and read the plaintext database credentials of datasources owned by other users.