Описание
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0 with Redis configured, Socket.IO connect, user-join, join-channels, join-note, and the terminal websocket first-message authentication used decode_token without the Redis-backed is_valid_token revocation check, allowing revoked JWTs to continue authenticating realtime connections. This issue is fixed in version 0.10.0.
Ссылки
- Patch
- ProductRelease Notes
- MitigationVendor AdvisoryExploit
- MitigationVendor AdvisoryExploit
Уязвимые конфигурации
Конфигурация 1Версия от 0.9.0 (включая) до 0.10.0 (исключая)
cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00456
Низкий
7.1 High
CVSS3
Дефекты
CWE-613
Связанные уязвимости
CVSS3: 7.1
github
около 1 месяца назад
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
EPSS
Процентиль: 38%
0.00456
Низкий
7.1 High
CVSS3
Дефекты
CWE-613