Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mhmr-w8pp-75w5

Опубликовано: 20 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

In version 0.7.5 of danny-avila/LibreChat, there is an improper access control vulnerability. Users can share, use, and create prompts without being granted permission by the admin. This can break application logic and permissions, allowing unauthorized actions.

In version 0.7.5 of danny-avila/LibreChat, there is an improper access control vulnerability. Users can share, use, and create prompts without being granted permission by the admin. This can break application logic and permissions, allowing unauthorized actions.

EPSS

Процентиль: 24%
0.0008
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-284
CWE-862

Связанные уязвимости

CVSS3: 5.4
nvd
11 месяцев назад

In version 0.7.5 of danny-avila/LibreChat, there is an improper access control vulnerability. Users can share, use, and create prompts without being granted permission by the admin. This can break application logic and permissions, allowing unauthorized actions.

EPSS

Процентиль: 24%
0.0008
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-284
CWE-862