Количество 2
Количество 2
CVE-2025-63681
2 месяца назад
open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks.
CVSS3: 4.3
EPSS: Низкий
GHSA-frv8-gffc-37px
2 месяца назад
open-webui is Vulnerable to Incorrect Access Control
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-63681 open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks. | CVSS3: 4.3 | 0% Низкий | 2 месяца назад |
| GHSA-frv8-gffc-37px open-webui is Vulnerable to Incorrect Access Control | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу
20