open-webui up to 0.3.8 /openai/models server-side request forgery 🚫 [False Positive]

Noticeinfo

⚠️ This appears to be a false positive. Please validate the mentioned sources and consider excluding this entry altogether.

Productinfo

Name

• open-webui

Version

• 0.3.0
• 0.3.1
• 0.3.2
• 0.3.3
• 0.3.4
• 0.3.5
• 0.3.6
• 0.3.7
• 0.3.8

Timelineinfo

08/19/2024 🔍
03/20/2025 +213 days 🔍
03/20/2025 +0 days 🔍
07/16/2026 +483 days 🔍

Sourcesinfo

Advisory: huntr.com
False Positive: Yes

CVE: CVE-2024-7959 (🔍)
GCVE (CVE): GCVE-0-2024-7959
GCVE (VulDB): GCVE-100-300458

Entryinfo

Created: 03/20/2025 15:22
Updated: 07/16/2026 22:18
Changes: 03/20/2025 15:22 (61), 07/21/2025 23:46 (12), 07/16/2026 22:18 (3)
Complete: 🔍
Cache ID: 216::103

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion

Interested in the pricing of exploits?

See the underground prices here!