Vulnerabilities > CVE-2021-44164 - Unspecified vulnerability in Chinasea QB Smart Service Robot
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary code without authentication, in order to take control of the system or terminate service.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |