Description (CNA)
In version 0.7.5 of danny-avila/LibreChat, there is an improper access control vulnerability. Users can share, use, and create prompts without being granted permission by the admin. This can break application logic and permissions, allowing unauthorized actions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| danny-avila / danny-avila/librechat | affected unspecified before 0.7.5 |
CWE
CWE-862
References
- https://huntr.com/bounties/41a1137d-e725-4fec-b04c-58555cb16b6b
- https://github.com/danny-avila/librechat/commit/42a4d02c62e2a6cf677d1cb6cfcb36d136aaa599
ADP enrichment
No English description supplied.
No references supplied.