Open WebUI SSRF in /openai/models
Date: 2024-08
Affected: open-webui
Attack vector: ssrf
Category: real-world
Severity: High
CVE: CVE-2024-7959
CWE: CWE-918
CVSS: 7.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)

Open WebUI /openai/models endpoint vulnerable to SSRF, allowing attackers to coerce the server into making requests to internal addresses.


Mitigations:

Architectural layers (MAESTRO):