Server-Side Request Forgery in FastChat by lm-sys
CVE-2024-11603

7.5HIGH

Key Information:

Vendor
Lm-sys
Status
Lm-sys/fastchat
Vendor
CVE Published:
20 March 2025

Summary

A Server-Side Request Forgery (SSRF) vulnerability exists in FastChat, specifically in version 0.2.36. This issue is found in the /queue/join? endpoint, where the validation of the path parameter is inadequate. An attacker can exploit this flaw by crafting malicious requests that may lead to unauthorized access to internal networks, including sensitive AWS metadata endpoints. This exposure can result in the compromise of internal servers and the leakage of confidential data.

Affected Version(s)

lm-sys/fastchat <= unspecified

References

https://huntr.com/bounties/89f1158d-4a75-4000-a1bd-f82dd1...

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.