open-webui@0.6.5 vulnerabilities

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) through the /api/v1/models/add endpoint. An attacker can execute arbitrary scripts that affect other users, including administrators, by injecting malicious scripts into the model description field which is not properly sanitized before being displayed.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the chat file upload functionality. An attacker can inject malicious scripts or content into a file, which, when accessed by a victim through a URL or shared chat, executes JavaScript in the victim's browser leading to potential user data theft, session hijacking, malware distribution, and phishing attacks.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Directory Traversal through the /models/upload endpoint. An attacker can manipulate the file.filename parameter to include directory traversal sequences, causing the resulting file_path to escape the intended UPLOAD_DIR and potentially overwrite arbitrary files on the system. This can lead to unauthorized modifications of system binaries, configuration files, or sensitive data, potentially enabling remote command execution.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) through the download_model endpoint. An attacker can manipulate file paths to write files to arbitrary locations on the server's filesystem, potentially overwriting critical system or application files, causing denial of service or achieving remote code execution.

Note:

This is only exploitable when deployed on Windows.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Cross-site Scripting (XSS). An attacker with a user-level account can manipulate session cookies to hijack administrator sessions, leading to unauthorized actions and potential system compromise by embedding a malicious markdown image in a chat, which, when viewed by an administrator, sends the admin's session cookie to the attacker's server.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the api/v1/utils/code/format endpoint. An attacker can cause the server to become unresponsive or experience significant degradation by sending a POST request with an excessively high volume of content.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Improper Privilege Management through the API endpoint http://0.0.0.0:8080/api/v1/users/{uuid_administrator}. An attacker, acting as an admin, can delete other administrators. This action is restricted by the user interface but can be performed through direct API calls.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Undefined Behavior for Input to API due to improper access control on the /api/v1/auths/admin/details interface. An attacker can view administrative details by directly calling the interface without needing administrative privileges.

Note:

This is only exploitable if the attacker has network access to the application's API.

There is no fixed version for open-webui.