Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-7046

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gv26-qw3h-8qvp

Open WebUI Allows Viewing of Admin Details An improper access control vulnerability in open-webui/open-webui v0.3.8 allows an attacker to view admin details. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/auths/admin/details interface to retrieve the first admin (owner) details.

gitlab/pypi/open-webui/CVE-2024-7046

Open WebUI Allows Viewing of Admin Details An improper access control vulnerability in open-webui/open-webui v0.3.8 allows an attacker to view admin details. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/auths/admin/details interface to retrieve the first admin (owner) details.