Описание
In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This vulnerability exposes sensitive information, including langfuse_secret and langfuse_public_key, which can provide full access to the Langfuse project storing all requests.
Ссылки
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:litellm:litellm:1.52.1:-:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.00133
Низкий
7.5 High
CVSS3
Дефекты
CWE-1230
Связанные уязвимости
EPSS
Процентиль: 34%
0.00133
Низкий
7.5 High
CVSS3
Дефекты
CWE-1230