Lucene search
+L

4 matches found

Veracode
Veracode
•added 2024/06/18 7:40 a.m.•39 views

Sensitive Information Disclosure

@lobehub/chat is vulnerable to Sensitive Information Disclosure. The vulnerability is due to insecure handling of the base URL in the frontend, allowing an attacker to modify it to their own attack URL. The attacker can then set up a server-side request to obtain the real backend API key...

5.7CVSS6.5AI score0.00546EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder