open-webui@0.3.17.dev3 vulnerabilities

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) through the authentication process using cookies with the SameSite attribute set to lax. An attacker can execute arbitrary code with the victim's privileges by crafting a malicious HTML page that modifies the Python code of an existing pipeline when accessed by the victim.

Upgrade open-webui to version 0.3.33 or higher.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Arbitrary File Upload via the audio/api/v1/transcriptions endpoint. An attacker can execute arbitrary code on the server by uploading a malicious file with a crafted filename that exploits insufficient validation of file.content_type and user-controlled filenames, leading to path traversal.

Upgrade open-webui to version 0.5.17 or higher.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Denial of Service (DoS) via the endpoint for converting markdown. An attacker can cause the server to spend excessive time on processing, rendering it unresponsive to other requests until the conversion is complete.

Upgrade open-webui to version 0.5.13 or higher.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) through the /api/v1/models/add endpoint. An attacker can execute arbitrary scripts that affect other users, including administrators, by injecting malicious scripts into the model description field which is not properly sanitized before being displayed.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Missing Authentication for Critical Function through the api/v1/utils/pdf endpoint. An attacker can exhaust server resources and cause a denial of service by sending a POST request with an excessively large payload. Additionally, unauthorized users can generate PDFs without proper verification, leading to misuse of the service and potential operational and financial impacts.

Upgrade open-webui to version 0.5.13 or higher.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Insufficient Isolation of System-Dependent Functions due to improper access control on the /api/v1/prompts/ and /api/v1/prompts/command/{command_id} interfaces. An attacker can view and retrieve prompt information without proper administrative verification by directly calling these interfaces.

Upgrade open-webui to version 0.4.0 or higher.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the chat file upload functionality. An attacker can inject malicious scripts or content into a file, which, when accessed by a victim through a URL or shared chat, executes JavaScript in the victim's browser leading to potential user data theft, session hijacking, malware distribution, and phishing attacks.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Directory Traversal through the /models/upload endpoint. An attacker can manipulate the file.filename parameter to include directory traversal sequences, causing the resulting file_path to escape the intended UPLOAD_DIR and potentially overwrite arbitrary files on the system. This can lead to unauthorized modifications of system binaries, configuration files, or sensitive data, potentially enabling remote command execution.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) through the download_model endpoint. An attacker can manipulate file paths to write files to arbitrary locations on the server's filesystem, potentially overwriting critical system or application files, causing denial of service or achieving remote code execution.

Note:

This is only exploitable when deployed on Windows.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Cross-site Scripting (XSS). An attacker with a user-level account can manipulate session cookies to hijack administrator sessions, leading to unauthorized actions and potential system compromise by embedding a malicious markdown image in a chat, which, when viewed by an administrator, sends the admin's session cookie to the attacker's server.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the api/v1/utils/code/format endpoint. An attacker can cause the server to become unresponsive or experience significant degradation by sending a POST request with an excessively high volume of content.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Improper Privilege Management through the API endpoint http://0.0.0.0:8080/api/v1/users/{uuid_administrator}. An attacker, acting as an admin, can delete other administrators. This action is restricted by the user interface but can be performed through direct API calls.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Undefined Behavior for Input to API due to improper access control on the /api/v1/auths/admin/details interface. An attacker can view administrative details by directly calling the interface without needing administrative privileges.

Note:

This is only exploitable if the attacker has network access to the application's API.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Incorrect Synchronization due to improper access control mechanisms. An attacker can view and delete any files by directly calling specific API endpoints without needing administrative privileges. This is only exploitable if the attacker has access to the network where the application is hosted.

There is no fixed version for open-webui.

open-webui is an Open WebUI

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in tooltip content rendering. An attacker can perform operations with the victim's privileges, such as stealing chat history and deleting chats, by convincing the victim to interact with a malicious prompt.

Upgrade open-webui to version 0.3.24 or higher.