Vulnerabilidades do Sdcb Chats
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Sdcb Chats: 2 registro(s), com versões afetadas e correções.
CVE-2026-82906
Baixa · 3.7
CWE-287 31/08/2026
sdcb chats Signed File Download Endpoint FileController.cs DownloadPublic missing authentication
A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possible. The attack's complexity is rated as high. The exploitability is said to be difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-82905
Média · 6.3
CWE-918 31/08/2026
sdcb chats fetch-tools Endpoint McpController.cs McpController server-side request forgery
A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/Controllers/Users/Mcps/McpController.cs of the component fetch-tools Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.