NextChat ChatGPT/Gemini UI Vulnerable to Server-Side Request Forgery
CVE-2024-38514

7.4HIGH

Key Information:

Vendor

Chatgptnextweb

Status
Chatgpt-next-web
Vendor
CVE Published:
28 June 2024

What is CVE-2024-38514?

NextChat, developed by ChatGPTNextWeb, contains a Server-Side Request Forgery (SSRF) vulnerability that arises from inadequate validation of the 'endpoint' GET parameter in the WebDav API endpoint. This flaw can be exploited to make arbitrary HTTPS requests from the vulnerable instance, enabling potential attackers to interact with the WebDav API using MKCOL, PUT, and GET methods. Furthermore, the SSRF vulnerability poses a risk to NextChat users, allowing attackers to execute arbitrary JavaScript code within users' browsers. The issue has been addressed in version 2.12.4, emphasizing the importance of updating to the latest version to mitigate security risks.

Affected Version(s)

ChatGPT-Next-Web < 2.12.4

References

https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web/securi...
x_refsource_CONFIRM
https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web/commit...
x_refsource_MISC

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.