Lucene search
+L

1 matches found

OSV
OSV
added 2025/10/17 5:46 p.m.11 views

GHSA-FGX4-P8XF-QHP9 Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch module

Vulnerability Description --- Vulnerability Overview - When the client sends an arbitrary URL array and impl: "naive" to the tRPC endpoint tools.search.crawlPages, the server issues outbound HTTP requests directly to those URLs. There is no defensive logic that restricts or validates requests to...

3CVSS7AI score0.003EPSS
SaveExploits0References5
Rows per page
Query Builder