by Kastro
Paper/Archive/CVE-2024-32964

CVE-2024-32964

lobehub lobe-chat — lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability

EPSS 53%public exploitCVSS 9.0
critical.is priorityof 100
57
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 99.0.990 × 2019.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Prior to 0.150.6, lobe-chat had an unauthorized Server-Side Request Forgery vulnerability in the /api/proxy endpoint. An attacker can construct malicious requests to cause Server-Side Request Forgery without logging in, attack intranet services, and leak sensitive information.

Affected

ProductAffectedFixed inSource
lobe-chat<= 0.150.5–CNA
lobe_chat< 0.150.60.150.6CISA-ADP

Scores by source

GitHub_M (CNA)9.0CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refgithub.com/lobehub/lobe-chat/security/advisories/GHSA-mxhq-xw3g-rphcrefgithub.com/lobehub/lobe-chat/commit/465665a735556669ee30446c7ea9049a20cc7c37