Chat2DB (Up to 5.3.8) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/chat2db-up-to-5.3.8/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 07:31:45 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOtterMind Chat2DB: Path traversal vulnerability (CVE-2026-124557)https://feed.craftedsignal.io/briefs/2026-11-ottermind-chat2db-path-traversal/Mon, 09 Nov 2026 07:31:45 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ottermind-chat2db-path-traversal/A path traversal vulnerability exists in the DbMybatisGenerateServiceImpl.generateClass function of OtterMind Chat2DB up to version 5.3.8.A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. The function DbMybatisGenerateServiceImpl.generateClass in DbMybatisGenerateServiceImpl.java (Class Generator component) is impacted. Manipulation of the tableName argument results in path traversal. The attack may be performed from remote. The exploit is public and the vendor did not respond to disclosure.

]]>highadvisory