Product by Open-webui

    Open-webui/open-webui

    22 known vulnerabilities in Open-webui/open-webui (Open-webui), 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Open-webui/open-webui (Open-webui)
    HighCVE-2024-7959

    SSRF in open-webui/open-webui

    also in 1 other product

    		7.7
    MediumCVE-2024-7035

    Cross-Site Request Forgery (CSRF) in open-webui/open-webui

    also in 1 other product

    		6.9
    MediumCVE-2024-7034

    Remote Code Execution due to Arbitrary File Write in open-webui/open-webui

    also in 1 other product

    		6.5
    HighCVE-2024-7990

    Stored Cross-Site Scripting in open-webui/open-webui

    also in 1 other product

    		8.4
    HighCVE-2024-8060

    Remote Code Execution in OpenWebUI via Arbitrary File Upload

    		8.1
    HighCVE-2024-7983

    Denial of Service in open-webui/open-webui

    also in 1 other product

    		7.5
    CriticalCVE-2024-8017

    Cross-site Scripting (XSS) in open-webui/open-webui

    also in 1 other product

    		9.0
    MediumCVE-2024-7033

    Arbitrary File Write in open-webui/open-webui

    also in 1 other product

    		6.5
    MediumCVE-2024-7037

    Arbitrary File Write/Delete Leading to RCE in open-webui/open-webui

    also in 1 other product

    		6.5
    HighCVE-2024-7036

    Denial of Service in open-webui/open-webui

    also in 1 other product

    		7.5
    HighCVE-2024-7043

    Improper Access Control in open-webui/open-webui

    also in 1 other product

    		8.1
    HighCVE-2024-7039

    Improper Privilege Management in open-webui/open-webui

    also in 1 other product

    		8.3
    HighCVE-2024-8053

    Improper Authentication in open-webui/open-webui

    also in 1 other product

    		7.5
    HighCVE-2024-7053

    Session Fixation in open-webui/open-webui

    		7.6
    HighCVE-2024-7806

    Remote Code Execution by Non-Admin Users via CSRF in open-webui/open-webui

    		8.0
    HighCVE-2024-7044

    Stored XSS in open-webui/open-webui

    also in 1 other product

    		6.8
    MediumCVE-2024-7040

    Improper Access Control in open-webui/open-webui

    also in 1 other product

    		4.9
    MediumCVE-2024-7041

    IDOR in open-webui/open-webui

    also in 1 other product

    		6.5
    MediumCVE-2024-7048

    IDOR in open-webui/open-webui

    also in 1 other product

    		6.3
    MediumCVE-2024-7045

    Improper Access Control in open-webui/open-webui

    also in 1 other product

    		4.3
    MediumCVE-2024-7046

    Improper Access Control in open-webui/open-webui

    also in 1 other product

    		4.3
    LowCVE-2024-7038

    Information Disclosure in open-webui/open-webui

    		2.7

    All products by Open-webui