CVE-2025-64706

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2025-64706

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-64706.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2025-64706

Aliases

GHSA-grx8-g27p-8hpp

Published

2025-11-13T17:49:29.802Z

Modified

2025-12-02T20:18:54.151705Z

Severity

5.0 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Summary

Typebot IDOR Vulnerability: Unauthorized API Token Deletion and Exposure

Details

Typebot is an open-source chatbot builder. In version 3.9.0 up to but excluding version 3.13.0, an Insecure Direct Object Reference (IDOR) vulnerability exists in the API token management endpoint. An authenticated attacker can delete any user's API token and retrieve its value by simply knowing the target user's ID and token ID, without requiring authorization checks. Version 3.13.0 fixes the issue.

Database specific

{
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64706.json",
    "cwe_ids": [
        "CWE-284",
        "CWE-639"
    ]
}

References

Affected packages

Git / github.com/baptistearno/typebot.io

Affected ranges

Type

GIT

Repo

https://github.com/baptistearno/typebot.io

Events

Introduced

9eb576598a916bdea292973691a8d36092ec307e

Fixed

a964ec77e16856714fb8cb2bed3782013eed0036

Database specific

{
    "versions": [
        {
            "introduced": "3.9.0"
        },
        {
            "fixed": "3.13.0"
        }
    ]
}

Affected versions

js-v0.*

js-v0.8.14

js-v0.8.15

js-v0.8.16

js-v0.8.17

js-v0.8.18

js-v0.8.19

js-v0.8.20

js-v0.8.21

js-v0.8.22

js-v0.8.23

js-v0.8.24

js-v0.9.0

js-v0.9.1

js-v0.9.2

js-v0.9.3

js-v0.9.4

js-v0.9.5

js-v0.9.6

react-v0.*

react-v0.8.14

react-v0.8.15

react-v0.8.16

react-v0.8.17

react-v0.8.18

react-v0.8.19

react-v0.8.20

react-v0.8.21

react-v0.8.22

react-v0.8.23

react-v0.8.24

react-v0.9.0

react-v0.9.1

react-v0.9.2

react-v0.9.3

react-v0.9.4

react-v0.9.5

react-v0.9.6

v3.*

v3.10.0

v3.11.0

v3.12.0

v3.9.0