16Nis
CVE-2024-30256 | Open WebUI up to 0.1.116 server-side request forgery (GHSA-39wr-r5vm-3jxj)
A vulnerability classified as critical has been found in Open WebUI up to 0.1.116. Affected is an unknown function. The manipulation leads to server-side request forgery. This vulnerability is traded as CVE-2024-30256. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.