Openchatbi
Monthly
Path traversal in OpenChatBI before fix. PoC and patch available.
SQL injection in zhongyu09 OpenChatBI allows authenticated remote attackers to manipulate queries processed by the incomplete `_validate_sql_safety` function within the text2sql pipeline. Versions 0.2.0 through 0.2.2 ship with zero SQL validation; version 0.3.0 introduced a bypassable validator, and v1.0.0b1/main retains the same incomplete logic with an optional - but non-default - stricter mode. The vendor did not respond to coordinated disclosure, leaving no official patch guidance; no public exploit code or CISA KEV listing has been identified at time of analysis.
Path traversal in OpenChatBI before fix. PoC and patch available.
SQL injection in zhongyu09 OpenChatBI allows authenticated remote attackers to manipulate queries processed by the incomplete `_validate_sql_safety` function within the text2sql pipeline. Versions 0.2.0 through 0.2.2 ship with zero SQL validation; version 0.3.0 introduced a bypassable validator, and v1.0.0b1/main retains the same incomplete logic with an optional - but non-default - stricter mode. The vendor did not respond to coordinated disclosure, leaving no official patch guidance; no public exploit code or CISA KEV listing has been identified at time of analysis.