NextChat / ChatGPT Next Web Detection

Binary data nextchatdetect.nbin...

VulnCheck KEV: CVE-2023-49785

NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using...

CVE-2023-49785

NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using...

Cross site scripting

NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using...

CVE-2023-49785 NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using...

CVE-2023-49785

NextChat/ChatGPT-Next-Web (CVE-2023-49785) is affected up to version 2.11.2 and earlier. The vulnerability enables Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) via the /api/cors endpoint, allowing read access to internal HTTP endpoints and, in some cases, write access. Attack...

CVE-2023-49785 NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using...

NextChat Code Issue Vulnerability

NextChat is a program for rapid deployment of private ChatGPT web applications. A security vulnerability exists in NextChat 2.11.2 and earlier versions, which stems from the presence of a server request forgery SSRF and cross-site scripting XSS vulnerability. An attacker can exploit the...

CVE-2023-49785: Server-Side Request Forgery (SSRF)

NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using...

PT-2023-8836 · Nextchat · Nextchat

Name of the Vulnerable Software and Affected Versions: NextChat versions 2.11.2 and prior Description: The issue concerns a server-side request forgery and cross-site scripting vulnerability in NextChat, also known as ChatGPT-Next-Web. This vulnerability enables read access to internal HTTP...