by Kastro
Paper/Archive/CVE-2024-11167

CVE-2024-11167

danny-avila danny-avila/librechat — Improper Access Control in danny-avila/librechat

EPSS 0.6%public exploitCVSS 9.4
critical.is priorityof 100
48
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 46.6.466 × 209.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An improper access control vulnerability in danny-avila/librechat versions prior to 0.7.6 allows authenticated users to delete other users' prompts via the groupid parameter. This issue occurs because the endpoint does not verify whether the provided prompt ID belongs to the current user.

Affected

ProductAffectedFixed inSource
danny-avila/librechatunspecified – < 0.7.60.7.6CNA

Scores by source

@huntr_ai (CNA)9.4CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refhuntr.com/bounties/298f5760-5797-4432-8b9e-544609d612c0refgithub.com/danny-avila/librechat/commit/5071bdbf9ac621165f0e8d009818851f3951eee7