PT-2024-28043 · Nextchat · Nextchat

Fred-Bf · Published 2024-06-28 · Updated 2024-07-01 · CVE-2024-38514

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions NextChat versions prior to 2.12.4

Description The issue is related to a Server-Side Request Forgery (SSRF) vulnerability. This is due to a lack of validation of the endpoint GET parameter on the "WebDav API endpoint". The SSRF can be used to perform arbitrary HTTPS requests from the vulnerable instance, supporting MKCOL, PUT, and GET methods. It can also target users and make them execute arbitrary JavaScript code in their browser.

Recommendations For versions prior to 2.12.4, update to version 2.12.4 to resolve the issue. As a temporary workaround, consider restricting access to the WebDav API endpoint until the update is applied. Avoid using the endpoint parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-38514

GHSA-GPH5-RX77-3PJG

Affected Products

Nextchat

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38514.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-38514 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38514 · Vendor Advisory
• https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web/commit/dad122199a85c2f12277593973e1784b212adf5e · Note
• https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web/security/advisories/GHSA-gph5-rx77-3pjg · Note