CVE Vulnerability Catalog

Open WebUI from 0.9.5 to 0.11.1 does not verify that the calling user authored the targeted message in the channel branch of chat_completion. A channel member can replace another member's message while preserving the victim as the stored author, altering the conversation record without gaining access to other channels. Fixed in 0.11.1.

Open WebUI from 0.7.0 to 0.11.1 fails to apply metadata filter in the built-in knowledge search tool, allowing an authenticated user to enumerate identifiers, names, and descriptions of inaccessible knowledge bases from the shared collection. Document text remains separate, but metadata is exposed. Fixed in 0.11.1.

In yshopmall version 3.3 and earlier, there is a Cross Site Scripting (XSS) vulnerability. The file upload endpoint /api/upload lacks file type validation. Attackers can upload files of any type, including HTML, JSP, and other executable files.

zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting (XSS) via SVG file upload through the /equipmentFile/upload endpoint.

In RuoYi-Cloud-Plus <= 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler/related user. Authenticated low-privileged remote attackers can read sensitive workflow task details and trigger unauthorized workflow executions.

Open WebUI from 0.6.27 to 0.11.1 incorrectly captures a cookie jar in external tools, potentially leaking user session cookies to the operator of another tool server. When multiple tool servers are attached and a session or OAuth connection is processed last, requests to a different server may include the user's Open WebUI session cookies, allowing account takeover. Fixed in 0.11.1.

Open WebUI from 0.9.0 to 0.11.1 fails to invalidate the cached user record after role changes. An administrator demoted through a trusted role header or OAuth role mapping can keep an already-open Socket.IO connection and continue reading or editing every user's collaborative notes until that connection closes. Fixed in 0.11.1.

Open WebUI from 0.10.0 to 0.11.1 allows an authenticated user to place a folder under itself or one of its descendants, creating a cycle in the folder tree. The lack of visited-folder tracking during delete and read operations enables a request that consumes CPU and memory indefinitely until repaired.

Open WebUI from 0.9.0 to 0.11.1 stores the calendar event alert_minutes value without type validation, and the scheduler compares it numerically. An authenticated user with calendar permission can store a non-numeric value that raises an exception and aborts the instance-wide alert pass, suppressing all users' reminders.

The gf_dm_get_chunk_data function in GPAC version 26.07.0 has an out-of-bounds read that can be exploited via a crafted HTTP request, causing a denial of service. The vulnerability is fixed in a specific commit.

The stbsp_vsnprintf function in nothings stb (commit 31c1ad3) has an out-of-bounds read that can be exploited via crafted input, causing a denial of service.

The stbtt_GetGlyphShape component in nothings stb (commit 31c1ad3) has an out-of-bounds read that can be exploited via a crafted TTF file, causing a denial of service.

The gf_dm_data_received function in GPAC version 26.07.0 has an out-of-bounds read that can be exploited via a crafted HTTP request, causing a denial of service. The vulnerability is fixed in a specific commit.

The gf_dash_get_timeline_duration function in GPAC version 26.07.0 has a divide-by-zero vulnerability that can be exploited via a crafted MPD SegmentTimeline, causing a denial of service. The vulnerability is fixed in a specific commit.

SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields (including passwords and roles) via crafted parameters to the User/mod interface, enabling account takeover.

money-pos 1.0 contains a stored Cross-Site Scripting (XSS) vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, directly concatenating it into the order log description; the frontend subsequently renders this content using v-html. An attacker with product creation privileges can inject a malicious JavaScript payload, causing unauthorized code execution when an administrator views the order logs.

A stored Cross-Site Scripting (XSS) vulnerability exists in the announcement preview component of REBUILD 4.4.3. Although the announcement content undergoes HTML escaping on the server side, the client-side preview code reverses the escaped entities using jQuery's `html().text()` method and subsequently injects the result into the DOM. An administrator or attacker capable of controlling the announcement content can exploit this vulnerability to execute arbitrary JavaScript code in the browsers of users viewing the affected pages, which may include the dashboard, activity feed, or login page, depending on the announcement's visibility settings.

The rattler_cache (before 0.9.0) and py-rattler (before 0.24.0) libraries are vulnerable to package-cache path traversal when handling package metadata from conda channels. A malicious channel can publish repodata with path separators in the build field, causing files to be written outside the cache directory.

The web-based management interface in CPPM guest account management services contains a vulnerability that allows an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits.

The ClearPass OnGuard agent contains a vulnerability that allows an authenticated remote attacker to elevate their own privileges on a vulnerable deployment. Successful exploitation could allow an attacker to obtain root privileges.