Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-6706

Open WebUI Stored Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
KoreLogic

Description

Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the context of the web page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open WebUI Open WebUI

Default version status: unaffected

  • 0.1.105affected

References