CVE-2024-3777

—

CVSS 3.1

9.8 critical

EPSS

<1%p51

Published

Apr 15, 2024 (Apr 15, 2024)

Modified

Jun 17, 2026

Description

The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.

Vendors: ai3
Products: qbibot
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.