From 33549977ce42aac112bf56bfd9c8234021ae79c3 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 21 Mar 2025 21:19:34 +0000 Subject: [PATCH] Publish Advisories GHSA-6wj5-5pgr-jwq8 GHSA-85jc-8h5p-8vw8 --- .../GHSA-6wj5-5pgr-jwq8.json | 37 +++++++++++++-- .../GHSA-85jc-8h5p-8vw8.json | 45 +++++++++++++++++-- 2 files changed, 74 insertions(+), 8 deletions(-) rename advisories/{unreviewed => github-reviewed}/2025/03/GHSA-6wj5-5pgr-jwq8/GHSA-6wj5-5pgr-jwq8.json (57%) rename advisories/{unreviewed => github-reviewed}/2025/03/GHSA-85jc-8h5p-8vw8/GHSA-85jc-8h5p-8vw8.json (51%) diff --git a/advisories/unreviewed/2025/03/GHSA-6wj5-5pgr-jwq8/GHSA-6wj5-5pgr-jwq8.json b/advisories/github-reviewed/2025/03/GHSA-6wj5-5pgr-jwq8/GHSA-6wj5-5pgr-jwq8.json similarity index 57% rename from advisories/unreviewed/2025/03/GHSA-6wj5-5pgr-jwq8/GHSA-6wj5-5pgr-jwq8.json rename to advisories/github-reviewed/2025/03/GHSA-6wj5-5pgr-jwq8/GHSA-6wj5-5pgr-jwq8.json index 2ba6ceb3309..addd0234d42 100644 --- a/advisories/unreviewed/2025/03/GHSA-6wj5-5pgr-jwq8/GHSA-6wj5-5pgr-jwq8.json +++ b/advisories/github-reviewed/2025/03/GHSA-6wj5-5pgr-jwq8/GHSA-6wj5-5pgr-jwq8.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-6wj5-5pgr-jwq8", - "modified": "2025-03-20T12:32:46Z", + "modified": "2025-03-21T21:17:35Z", "published": "2025-03-20T12:32:46Z", "aliases": [ "CVE-2024-7999" ], + "summary": "Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/file", "details": "A vulnerability in open-webui/open-webui version 79778fa allows an attacker to cause a Denial of Service (DoS) by uploading a file with a malformed multipart boundary. By appending a large number of characters to the end of the multipart boundary, the server continuously processes each character, rendering the application inaccessible. This issue can prevent all users from accessing the application until the server recovers.", "severity": [ { @@ -13,12 +14,40 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "open-webui" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.4.7" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7999" }, + { + "type": "WEB", + "url": "https://github.com/open-webui/open-webui/commit/f311c03a21dc09e279a0cad7482a68b273517baf" + }, + { + "type": "PACKAGE", + "url": "https://github.com/open-webui/open-webui" + }, { "type": "WEB", "url": "https://huntr.com/bounties/15eb4fbe-70d4-420e-806a-ec6f4ecb7202" @@ -29,8 +58,8 @@ "CWE-400" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-03-21T21:17:35Z", "nvd_published_at": "2025-03-20T10:15:38Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-85jc-8h5p-8vw8/GHSA-85jc-8h5p-8vw8.json b/advisories/github-reviewed/2025/03/GHSA-85jc-8h5p-8vw8/GHSA-85jc-8h5p-8vw8.json similarity index 51% rename from advisories/unreviewed/2025/03/GHSA-85jc-8h5p-8vw8/GHSA-85jc-8h5p-8vw8.json rename to advisories/github-reviewed/2025/03/GHSA-85jc-8h5p-8vw8/GHSA-85jc-8h5p-8vw8.json index 2dabe7f90c0..25c34146f59 100644 --- a/advisories/unreviewed/2025/03/GHSA-85jc-8h5p-8vw8/GHSA-85jc-8h5p-8vw8.json +++ b/advisories/github-reviewed/2025/03/GHSA-85jc-8h5p-8vw8/GHSA-85jc-8h5p-8vw8.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-85jc-8h5p-8vw8", - "modified": "2025-03-20T12:32:47Z", + "modified": "2025-03-21T21:18:09Z", "published": "2025-03-20T12:32:46Z", "aliases": [ "CVE-2024-7806" ], + "summary": "Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability", "details": "A vulnerability in open-webui/open-webui versions <= 0.3.8 allows remote code execution by non-admin users via Cross-Site Request Forgery (CSRF). The application uses cookies with the SameSite attribute set to lax for authentication and lacks CSRF tokens. This allows an attacker to craft a malicious HTML that, when accessed by a victim, can modify the Python code of an existing pipeline and execute arbitrary code with the victim's privileges.", "severity": [ { @@ -13,12 +14,48 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "open-webui" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.3.33" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7806" }, + { + "type": "WEB", + "url": "https://github.com/open-webui/open-webui/pull/6054" + }, + { + "type": "WEB", + "url": "https://github.com/open-webui/open-webui/commit/7e253df17593bc12dc5cc89d28703675f05b0158" + }, + { + "type": "PACKAGE", + "url": "https://github.com/open-webui/open-webui" + }, + { + "type": "WEB", + "url": "https://github.com/open-webui/open-webui/blob/1d20c27553f019477f01d7233ebe40b11d31e479/backend/main.py#L892-L920" + }, { "type": "WEB", "url": "https://huntr.com/bounties/9350a68d-5f33-4b3d-988b-81e778160ab8" @@ -29,8 +66,8 @@ "CWE-352" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-03-21T21:18:09Z", "nvd_published_at": "2025-03-20T10:15:37Z" } } \ No newline at end of file