Skip to content
OpenAdvisories

Vendor

cosin2077

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API

    easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send POST requests by supplying openaiBaseUrl with useLLM enabled. Attackers can target loopback and internal services throug…