Improper Access Control in LibreChat by Danny Avila

CVE-2024-10363

What is CVE-2024-10363?

In LibreChat version 0.7.5, an improper access control vulnerability allows users to create, share, and utilize prompts without proper authorization from the admin. This weakness can disrupt application logic and permissions, leading to potential unauthorized actions within the application. Mitigating this vulnerability is crucial to maintain the integrity and safety of user interactions.

References