Lucene search
PRIOn knowledge basePRION:CVE-2024-24566HistoryJan 31, 2024 - 5:15 p.m.
Authorization
2024-01-3117:15:00
PRIOn knowledge base
www.prio-n.com
3
lobe chat
chatbot
speech synthesis
multimodal
function call plugin
vulnerability
patched
0.122.4
authorization
Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected (deployed with the ACCESS_CODE option), it is possible to access plugins without proper authorization (without password). This vulnerability is patched in 0.122.4.
Related
veracode
veracode
Authentication Bypass
2024-02-01 09:20:35
cvelist
cvelist
CVE-2024-24566 Lobe Chat unauthorized access to plugins
2024-01-31 16:33:44
nvd
nvd
CVE-2024-24566
2024-01-31 17:15:39
osv
osv
@lobehub/chat vulnerable to unauthorized access to plugins
2024-01-31 18:04:55
CVE-2024-24566
2024-01-31 17:15:39
cve
cve
CVE-2024-24566
2024-01-31 17:15:39
github
github
@lobehub/chat vulnerable to unauthorized access to plugins
2024-01-31 18:04:55