Description (CNA)
Open WebUI is a user-friendly WebUI for LLMs. Open-webui is vulnerable to authenticated blind server-side request forgery. This vulnerability is fixed in 0.1.117.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| open-webui / open-webui | affected < 0.1.117 |
CWE
CWE-918
References
- https://github.com/open-webui/open-webui/security/advisories/GHSA-39wr-r5vm-3jxj
- https://securitylab.github.com/advisories/GHSL-2024-033_open-webui
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.