CVE-2021-44162

7.5 highEPSS 1.7%

High (7.5) in chinasea qb smart service robot. EPSS 1.7% chance of exploitation in the next 30 days.

Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

chinasea:qb_smart_service_robot

References

https://www.twcert.org.tw/tw/cp-132-5397-b1f40-1.html
https://www.twcert.org.tw/tw/cp-132-5397-b1f40-1.html

Check your stack JSON