CVE Vulnerability Catalog

Prototype Pollution vulnerability in jsondiffpatch before version 0.7.6 allows an attacker to modify Object.prototype by supplying crafted delta or JSON Patch documents. The issue stems from unrestricted access to special properties like __proto__ or constructor.prototype in the jsondiffpatch.patch() and jsondiffpatch/formatters/jsonpatch.patch() APIs.

Crypt::DSA versions before 1.20 for Perl generate seeds using the rand function, which is predictable and unsuitable for security usage.

In Open WebUI prior to version 0.8.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Banner component due to an improper sanitization order. This allows a compromised administrator to plant a malicious payload in the global banner, leading to privilege escalation.

In Open WebUI prior to version 0.8.6, there is a vulnerability in the chat completion API that allows attackers to bypass tool restrictions, potentially enabling unauthorized actions or access.

In Open WebUI prior to version 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in the _process_picture_url() function, allowing an attacker to force the server to make HTTP requests to internal resources.

Open WebUI prior to version 0.9.3 has a vulnerability that allows audio files with HTML extensions to be uploaded, potentially leading to the execution of malicious code in users' browsers. A user with the appropriate permissions can trick others into opening a malicious link.

Open WebUI is a self-hosted artificial intelligence platform that prior to version 0.6.5 allowed for script injection and execution through the HTML rendering view. The chat content was embedded in an iFrame with sandbox restrictions that were largely ineffective.

Open WebUI is a self-hosted artificial intelligence platform that prior to version 0.3.16 had a missing permission check in files related to API endpoints. This allowed any authenticated user to list, access, and delete every file uploaded by other users.

In Open WebUI prior to version 0.6.19, there were inconsistencies in authorization controls surrounding the memories API, allowing standard users to delete, restore, and view the contents of other users' memories.

In Open WebUI prior to version 0.6.19, there is an IDOR vulnerability in the channels message management system that allows authenticated users to modify or delete any message within channels they have access to. The issue arises from a lack of message ownership validation in the message update and delete endpoints.

Open WebUI is a self-hosted artificial intelligence platform that prior to version 0.1.124 did not properly validate whether a user has an authorized role. By default, when new user sign-ups are enabled, the user role is set to 'pending', requiring administrator intervention to assign the appropriate role.

Open WebUI is an artificial intelligence platform that prior to version 0.1.124 did not validate or sanitize file names uploaded by users. This allows users to upload files with names containing dot-segments, enabling traversal out of the intended upload directory.

Open WebUI is a self-hosted artificial intelligence platform that prior to version 0.6.10 did not validate or sanitize file names when uploading audio files. This allows users to upload files with names containing dot-segments, enabling traversal out of the intended uploads directory.

Open WebUI is a self-hosted artificial intelligence platform that prior to version 0.8.0 previewed Excel file attachments in an unsafe manner. A crafted XLSX file payload could exploit the sheetjs function sheet_to_html to embed an XSS payload into the generated HTML.

Version 6.1.5 of radare2 contains a use-after-free vulnerability in the gdbr_pids_list() function, which can be exploited by remote attackers to cause a denial of service or potentially execute arbitrary code by sending malformed thread information responses.

Open WebUI is a self-hosted artificial intelligence platform that prior to version 0.8.12 allowed any verified user to execute arbitrary Python code, even when the admin set ENABLE_CODE_EXECUTION=false. The API endpoint did not enforce this configuration, leading to unauthorized code execution.

Open WebUI prior to version 0.9.5 has a vulnerability that allows users to attach files to resources they do not have permission for, potentially leading to the exfiltration of other users' private files.

In versions prior to 0.9.5, the validate_url() function in Open WebUI does not validate HTTP 3xx redirects, allowing authenticated users to access internal IP addresses via public URLs. This may lead to unauthorized reading of data from internal resources.

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.9.5, a parsing difference between the urlparse and requests libraries led to an SSRF bypass vulnerability.

In Open WebUI prior to version 0.9.5, a vulnerability allows authenticated users to access private knowledge bases by knowing the UUID. This flaw also enables attackers to inject or overwrite content in other users' knowledge bases.