Skip to content
OpenAdvisories

Archive

11 March 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-49785 Public exploit Scanner template EPSS 83%

    NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

    NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP e…

  • Critical 9.8
    CVE-2024-0039 Public exploit

    In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This…