EUVD-2002-1640

Malware in sbrugna...

CVE-2024-7040

CVE-2024-7040 affects open-webui/open-webui v0.3.8, where an improper access-control flaw on the frontend admin page lets an admin view chats of other admins by tampering the user_id parameter. Root cause: insufficient authorization checks on admin chats. Affected component is the admin chat view...