CVE-2023-49785
1 advisory.
npm/nextchat CVE-2023-49785: critical 9.1, EPSS 83.16%
NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.11.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qf3q-9f3h-cjp9
- https://nvd.nist.gov/vuln/detail/CVE-2023-49785
- https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web
- https://www.horizon3.ai/attack-research/attack-blogs/nextchat-an-ai-chatbot-that-lets-you-talk-to-anyone-you-want-to
CVE-2023-49785 · published · modified · JSON