Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/05/10 3:29 p.m.98 views

lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability

Summary The latest version of lobe-chatby now v0.141.2 has an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information. Details visit https://chat-preview.lobehub.com/settings/agent you...

9CVSS6.9AI score0.52683EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder