Lucene search
+L

21 matches found

Github Security Blog
Github Security Blog
added 2026/08/04 7:45 p.m.13 views

Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages

Summary On standard channels, the message update and delete handlers accepted any caller holding write access on the channel, without checking that the caller wrote the message. Write access is the same grant a member needs in order to post, so every ordinary participant in a shared channel could...

5.4CVSS5.7AI score0.00299EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder