Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2024-30256

Open WebUI vulnerable to server-side request forgery in utils.py

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Open WebUI is a user-friendly WebUI for LLMs. Open-webui is vulnerable to authenticated blind server-side request forgery. This vulnerability is fixed in 0.1.117.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

open-webui open-webui

  • < 0.1.117affected

References