Lucene search
+L

CVE-2023-49785

🗓️ 11 Mar 2024 23:26:10Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 130 Views

NextChat vulnerability in versions 2.11.2 and earlier allows SSRF and XSS attacks, enabling read and write access, and IP masking

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
ChatGPT-Next-Web SSRF
20 Mar 202400:00
–bdu_fstec
circl
Circl
CVE-2023-49785
12 Mar 202401:26
–circl
cnnvd
CNNVD
NextChat Code Issue Vulnerability
11 Mar 202400:00
–cnnvd
cvelist
Cvelist
CVE-2023-49785 NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting
11 Mar 202423:26
–cvelist
github
Github Security Blog
NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint
5 Aug 202421:29
–github
kitploit
Kitploit
NextChat_SSRF_CVE-2023-49785
14 Oct 202601:15
–kitploit
mend
Mend
CVE-2023-49785
11 Mar 202423:26
–mend
nessus
Tenable Nessus
NextChat < 2.11.3 SSRF
29 Apr 202400:00
–nessus
nessus
Tenable Nessus
NextChat < 2.11.3 SSRF
29 Apr 202400:00
–nessus
nessus
Tenable Nessus
NextChat < 2.11.3 Server-Side Request Forgery
20 Jun 202400:00
–nessus
Rows per page
NVD
Vulners
Vulnrichment
Node
nextchatnextchatRange≤2.11.2
[
  {
    "defaultStatus": "unaffected",
    "product": "NextChat",
    "vendor": "ChatGPTNextWeb",
    "versions": [
      {
        "lessThanOrEqual": "2.11.2",
        "status": "affected",
        "version": "0",
        "versionType": "2.11.2"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:36Current
8.9High risk
Vulners AI Score8.9
CVSS 3.19.1 - 9.8
EPSS0.83163
SSVC
130