CVE-2024-7806
2 advisories.
PyPI/open-webui CVE-2024-7806: high 8
Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability
Action: Upgrade open-webui to 0.3.33 or later.
pip install open-webui==0.3.33Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.33 | - |
Fixed versions
| 0.3.33 |
Sources
- osv: GHSA-85jc-8h5p-8vw8
- https://nvd.nist.gov/vuln/detail/CVE-2024-7806
- https://github.com/open-webui/open-webui/pull/6054
- https://github.com/open-webui/open-webui/commit/7e253df17593bc12dc5cc89d28703675f05b0158
- https://github.com/open-webui/open-webui
- https://github.com/open-webui/open-webui/blob/1d20c27553f019477f01d7233ebe40b11d31e479/backend/main.py#L892-L920
- https://huntr.com/bounties/9350a68d-5f33-4b3d-988b-81e778160ab8
CVE-2024-7806 · published · modified · JSON
PyPI/open-webui CVE-2024-7806: high 8
Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability
Action: Upgrade open-webui to 0.3.33 or later.
pip install open-webui==0.3.33Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.33 | - |
Fixed versions
| 0.3.33 |
Sources
- osv: PYSEC-2026-1724
- https://nvd.nist.gov/vuln/detail/CVE-2024-7806
- https://github.com/open-webui/open-webui/pull/6054
- https://github.com/open-webui/open-webui/commit/7e253df17593bc12dc5cc89d28703675f05b0158
- https://github.com/open-webui/open-webui
- https://github.com/open-webui/open-webui/blob/1d20c27553f019477f01d7233ebe40b11d31e479/backend/main.py#L892-L920
- https://huntr.com/bounties/9350a68d-5f33-4b3d-988b-81e778160ab8
- https://pypi.org/project/open-webui
- https://github.com/advisories/GHSA-85jc-8h5p-8vw8
CVE-2024-7806 · published · modified · JSON