Description
An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| lm-sys | lm-sys/fastchat | unspecified – ≤ latest | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- FastChat - Open Redirect http/cves/2024/CVE-2024-10908.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | fschat | <= 0.2.36 | — | GHSA-77cj-rv5x-v6r2 |