FastChat Server-Side Request Forgery vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-12376 · ADVISORY
• lm-sys/FastChat · PACKAGE
• huntr.com/bounties/c9cc3f28-ee9f-4d2d-9ee5-8c6455a11892 · WEB
• pypi.org/project/fschat · PACKAGE
• GitHub Advisory GHSA-g44m-hpf4-vmrp · ADVISORY

fschat のその他の脆弱性

• CVE-2026-6608中 5.3A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena Side-by-Side View Han…
• CVE-2026-6607中 5.3A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function api_generate of the component Wo…
• CVE-2024-11603高 7.5A Server-Side Request Forgery (SSRF) vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the `/queue/joi…
• CVE-2024-10912高 7.5A Denial of Service (DoS) vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to imp…
• CVE-2024-10908中 6.1An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary we…