Vendor
cosin2077
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API
easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send POST requests by supplying openaiBaseUrl with useLLM enabled. Attackers can target loopback and internal services throug…