Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x757-hv69-jr45

Опубликовано: 20 мар. 2025
Источник: github
Github: Прошло ревью
CVSS3: 7.7

Описание

Open WebUI has SSRF in /openai/models

The /openai/models endpoint in open-webui/open-webui version 0.3.8 is vulnerable to Server-Side Request Forgery (SSRF). An attacker can change the OpenAI URL to any URL without checks, causing the endpoint to send a request to the specified URL and return the output. This vulnerability allows the attacker to access internal services and potentially gain command execution by accessing instance secrets.

Пакеты

Наименование

open-webui

pip
Затронутые версииВерсия исправления

<= 0.3.8

Отсутствует

EPSS

Процентиль: 57%
0.00355
Низкий

7.7 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.7
nvd
11 месяцев назад

The `/openai/models` endpoint in open-webui/open-webui version 0.3.8 is vulnerable to Server-Side Request Forgery (SSRF). An attacker can change the OpenAI URL to any URL without checks, causing the endpoint to send a request to the specified URL and return the output. This vulnerability allows the attacker to access internal services and potentially gain command execution by accessing instance secrets.

EPSS

Процентиль: 57%
0.00355
Низкий

7.7 High

CVSS3

Дефекты

CWE-918