5 matches found
CVE-2024-7039
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-7039
Open WebUI (open-webui/open-webui) version v0.3.8 contains an improper privilege management vulnerability: an attacker with admin rights can delete other administrators via the API endpoint DELETE http://0.0.0.0:8080/api/v1/users/{uuid_administrator}, bypassing UI restrictions. The issue is confi...
CVE-2024-7039 Improper Privilege Management in open-webui/open-webui
In open-webui/open-webui version v0.3.8, there is an improper privilege management vulnerability. The application allows an attacker, acting as an admin, to delete other administrators via the API endpoint http://0.0.0.0:8080/api/v1/users/uuidadministrator. This action is restricted by the user...
