Kurz gesagt
- CVE-2024-2952 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in litellm, litellm (litellm).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.3%, höher als bei 69.8% aller Schwachstellen.
- Abhilfe: auf 1.34.42 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| litellm PyPI | < 1.34.42
| 1.34.42
|
| litellm | < 1.34.42
| 1.34.42
|
Description
BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the /completions endpoint. The vulnerability arises from the hf_chat_template method processing the chat_template parameter from the tokenizer_config.json file through the Jinja template engine without proper sanitization. Attackers can exploit this by crafting malicious tokenizer_config.json files that execute arbitrary code on the server.
NVD description
BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint. The vulnerability arises from the `hf_chat_template` method processing the `chat_template` parameter from the `tokenizer_config.json` file through the Jinja template engine without proper sanitization. Attackers can exploit this by crafting malicious `tokenizer_config.json` files that execute arbitrary code on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free