Skip to content
OpenAdvisories

Product · ChatGPTNextWeb

ChatGPT-Next-Web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2024-38514 Scanner template

    NextChat Server-Side Request Forgery (SSRF)

    NextChat is a cross-platform ChatGPT/Gemini UI. There is a Server-Side Request Forgery (SSRF) vulnerability due to a lack of validation of the `endpoint` GET parameter on the WebDav API endpoint. This SSRF can be used to perform arbitrary HTTPS request from t…

    ChatGPTNextWeb ChatGPT-Next-Web