Количество 2
Количество 2
CVE-2024-7041
An Insecure Direct Object Reference (IDOR) vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint `http://0.0.0.0:3000/api/v1/memories/{id}/update`, where the decentralization design is flawed, allowing attackers to edit other users' memories without proper authorization.
GHSA-xcvc-5hgv-phqg
open-webui Insecure Direct Object Reference (IDOR) vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-7041 An Insecure Direct Object Reference (IDOR) vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint `http://0.0.0.0:3000/api/v1/memories/{id}/update`, where the decentralization design is flawed, allowing attackers to edit other users' memories without proper authorization. | CVSS3: 6.5 | 0% Низкий | больше 1 года назад |
| GHSA-xcvc-5hgv-phqg open-webui Insecure Direct Object Reference (IDOR) vulnerability | CVSS3: 6.5 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу