Advisories · Technology
baptisteArno typebot.io.
Every CVE that names baptisteArno typebot.io among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
TypeBot: Arbitrary server file read via Send Email block attachment path
- baptisteArno typebot.io
- Path traversal
- Information disclosure
- CVSS 6.4 Medium
TypeBot: Cross-tenant custom-domain removal via unbound `name` in handleDeleteCustomDomain
- baptisteArno typebot.io
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
TypeBot: Account takeover via brute-forceable 6-digit magic-link code
- baptisteArno typebot.io
- Authentication bypass
- Weak cryptography or TLS
- CVSS 8.2 High
TypeBot has Arbitrary S3 Object Write in deprecated public upload endpoint via attacker-controlled filePath
- baptisteArno typebot.io
- Broken access control
- CVSS 5.4 Medium
TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handler
- baptisteArno typebot.io
- Server-side request forgery (SSRF)
- CVSS 9.9 CriticalCritical · CVSS 9+
TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding
- baptisteArno typebot.io
- Broken access control
- CVSS 9.6 CriticalCritical · CVSS 9+
TypeBot vulnerable to CSV injection in result export
- baptisteArno typebot.io
- Other injection
- CVSS 7.6 High
Google Sheets OAuth access token disclosure to guest members via getAccessToken
- baptisteArno typebot.io
- Information disclosure
- CVSS 7.1 High
TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via global `wa-preview-{phone}` session ids
- baptisteArno typebot.io
- Broken access control
- CVSS 7.1 High
TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session
- baptisteArno typebot.io
- Broken access control
- CVSS 5.4 Medium
TypeBot's WhatsApp status forwarding uses unvalidated user-controlled URLs, allowing SSRF from the Typebot server
- baptisteArno typebot.io
- Server-side request forgery (SSRF)
- CVSS 7.1 High
TypeBot Google Sheets OAuth callback can create credentials in unauthorized workspaces and modify arbitrary typebots
- baptisteArno typebot.io
- Broken access control
- CVSS 7.6 High
TypeBot vulnerable to OpenAI API key exfiltration in listModels via attacker-controlled baseUrl
- baptisteArno typebot.io
- Information disclosure
- CVSS 7.1 High
TypeBot has Authorization Bypass in Google Sheets `getSheets` Endpoint that Allows Cross-Workspace Credential Access
- baptisteArno typebot.io
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
TypeBot API tokens stored in plaintext
- baptisteArno typebot.io
- Information disclosure
- CVSS 8.1 High
TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution
- baptisteArno typebot.io
- Server-side request forgery (SSRF)
- CVSS 8.2 High
TypeBot has SSRF in HTTP request and script fetch flows via DNS rebinding bypass
- baptisteArno typebot.io
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName
- baptisteArno typebot.io
- Path traversal
- Cross-site scripting (XSS)
- CVSS 7.1 High
TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion)
- baptisteArno typebot.io
- Broken access control
- CVSS 6.5 Medium
TypeBot: WhatsApp Webhook Endpoint Missing Signature Verification
- baptisteArno typebot.io
- Authentication bypass
- CWE-345
- CVSS 3.1 Low
TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter
- baptisteArno typebot.io
- Broken access control
- CVSS 7.1 High
TypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview Endpoint
- baptisteArno typebot.io
- Broken access control
- Hard-coded credentials
- CVSS 6.5 Medium
TypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions
- baptisteArno typebot.io
- Broken access control
- CVSS 8.5 High
TypeBot: Stored Cross-Site Scripting (XSS) via SVG File Upload On Profile Picture Form
- baptisteArno typebot.io
- Cross-site scripting (XSS)
- CVSS 7.7 High
TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks
- baptisteArno typebot.io
- Server-side request forgery (SSRF)
- CVSS 7.6 High
TypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation
- baptisteArno typebot.io
- Server-side request forgery (SSRF)
- CWE-20
- CVSS 10.0 CriticalCritical · CVSS 9+
TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls
- baptisteArno typebot.io
- Broken access control
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Typebot: IDOR in Result Logs Endpoint Allows Cross-Workspace Data Disclosure
- baptisteArno typebot.io
- Broken access control
- CVSS 9.6 CriticalCritical · CVSS 9+
Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block
- baptisteArno typebot.io
- Server-side request forgery (SSRF)
- CVSS 5.0 Medium
Typebot IDOR Vulnerability: Unauthorized API Token Deletion and Exposure
- baptisteArno typebot.io
- Broken access control
- CVSS 8.1 High
typebot.io: `GHSL-2024-040`
- baptisteArno typebot.io
- Cross-site scripting (XSS)