Improper Restriction of Rendered UI Layers or Frames

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames in the FilePreview process. An attacker can gain unauthorized access to session tokens and potentially take over user accounts by serving a crafted HTML fi...