CVE-2024-12766

parisneo/lollms-webui version V13 feather suffers from a Server-Side Request Forgery SSRF vulnerability in the "POST /api/proxy" REST API. Attackers can exploit this vulnerability to abuse the victim server's credentials to access unauthorized web resources by specifying the JSON parameter...

CVE-2024-12766: Server-Side Request Forgery (SSRF)

parisneo/lollms-webui version V13 feather suffers from a Server-Side Request Forgery SSRF vulnerability in the POST /api/proxy REST API. Attackers can exploit this vulnerability to abuse the victim server's credentials to access unauthorized web resources by specifying the JSON parameter...

PT-2025-12144

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui version V13 feather Description The issue is a Server-Side Request Forgery SSRF vulnerability in the "POST /api/proxy" REST API. Attackers can exploit this to access unauthorized web resources by specifying the JSON...