Vulnerabilidades en chatwoot
21 resultadosCVE-2022-1022HIGHCross-site Scripting (XSS) - Stored in chatwoot/chatwootEPSS 4.5%CVE-2022-3741CRITICALImproper Restriction of Excessive Authentication Attempts in chatwoot/chatwootEPSS 1.2%CVE-2021-3649HIGHInefficient Regular Expression Complexity in chatwoot/chatwootEPSS 1.2%CVE-2021-3813MEDIUMImproper Privilege Management in chatwoot/chatwootEPSS 1.1%CVE-2022-0542HIGHCross-site Scripting (XSS) - DOM in chatwoot/chatwootEPSS 1.0%CVE-2022-0526HIGHCross-site Scripting (XSS) - Stored in chatwoot/chatwootEPSS 0.9%CVE-2022-0527MEDIUMCross-site Scripting (XSS) - Stored in chatwoot/chatwootEPSS 0.9%CVE-2022-1021HIGHInsecure Storage of Sensitive Information in chatwoot/chatwootEPSS 0.8%CVE-2025-21628CRITICALChatwoot has a Blind SQL-injection in Conversation and Contacts filtersEPSS 0.7%CVE-2022-2901HIGHImproper Authorization in chatwoot/chatwootEPSS 0.6%CVE-2026-72719MEDIUMChatwoot: Cross-Account Resource Transfer via `account_id` ParameterEPSS 0.6%CVE-2026-63765HIGHChatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob CreationEPSS 0.5%CVE-2021-3742HIGHServer-Side Request Forgery (SSRF) in chatwoot/chatwootEPSS 0.4%CVE-2023-2109MEDIUMCross-site Scripting (XSS) - DOM in chatwoot/chatwootEPSS 0.4%CVE-2026-44707MEDIUMChatwoot: Pre-Account Takeover via OAuth on Unconfirmed AccountsEPSS 0.3%CVE-2021-3741HIGHStored Cross-site Scripting (XSS) in chatwoot/chatwootEPSS 0.3%CVE-2024-0640MEDIUMStored XSS in chatwoot/chatwootEPSS 0.3%CVE-2026-115725LOWChatwoot before 4.17.0 Cross-Account Authorization Bypass via source_idEPSS 0.2%CVE-2026-113355MEDIUMChatwoot before 4.14.0 Stored XSS via Help Center Video Embed LinksEPSS 0.2%CVE-2026-44706HIGHChatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute ValuesEPSS 0.2%