Skip to content
OpenAdvisories

Product · open-webui

open-webui/open-webui

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2024-8017

    Cross-site Scripting (XSS) in open-webui/open-webui

    An XSS vulnerability exists in open-webui/open-webui versions <= 0.3.8, specifically in the function that constructs the HTML for tooltips. This vulnerability allows attackers to perform operations with the victim's privileges, such as stealing chat history, …

    open-webui open-webui/open-webui