| 제목 | ramon-victor (https://github.com/ramon-victor) freegpt-webui latest (main/master branch) CWE-306 (Missing Authentication for Critical Function - endpoint |
|---|
| 설명 | Unauthenticated access to backend conversation API - Location: `server/backend.py:12`. The /backend-api/v2/conversation endpoint performs zero authentication or authorization checks. There is no login, no API key, no session validation, and no rate limiting. Additionally, the 'model' parameter from the client is never validated against the server-configured whitelist in server/config.py (models = {'gpt-3.5-turbo', 'gpt-3.5-turbo-16k-0613', 'gpt-3.5-turbo-16k', 'gpt-4'}). Any anonymous internet user can call this endpoint with any model name, consume upstream AI provider resources (including expensive models like gpt-4), and trigger jailbreak modes. The broken business rule is that access to the AI proxy service should be restricted and the selectable models should be limited to the configured whitelist. Exploitation: An attacker sends: POST /backend-api/v2/conversation with body {"model":"gpt-4","conversation_id":"a-b","jailbreak":"gpt-dan-11.0","meta":{"content":{"conversation":[],"internet_access":true,"parts":[{"role":"user","content":"..."}]}}}. No authentication is required. The attacker can repeatedly call this endpoint to exhaust rate limits on upstream free AI providers, degrade service for legitimate users, and access models not intended for public use. The attacker can also set jailbreak to 'gpt-dan-11.0' or 'gpt-evil' to bypass content safety.
|
|---|
| 원천 | ⚠️ https://gist.github.com/Galaxync/15cb5d1bf6ab110f0cba91664ed511dd |
|---|
| 사용자 | Galaxyn (UID 98388) |
|---|
| 제출 | 2026. 07. 19. AM 03:56 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 04. PM 04:42 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 398805 [ramon-victor freegpt-webui 까지 098db3dfeb41555c2ca9269df0f13e10ec1c35dc Backend Conversation API server/backend.py _conversation model 약한 인증] |
|---|
| 포인트들 | 20 |
|---|