Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:45:41 +0000 CVE-2024-32881 — Unauthorized access to GET/SET of Slack Bot Tokens in Danswer https://cve.radiocsirt.org/vuln/cve-2024-32881 <p><strong>Affected:</strong> danswer-ai danswer</p> <p>Danswer is the AI Assistant connected to company&#39;s docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the customer&#39;s slack bot, leading to internal Slack access. This issue was patched in version 3.63.</p> <p><strong>Affected:</strong> danswer-ai danswer</p> <p>Danswer is the AI Assistant connected to company&#39;s docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the customer&#39;s slack bot, leading to internal Slack access. This issue was patched in version 3.63.</p> https://cve.radiocsirt.org/vuln/cve-2024-32881