Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-32964

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Prior to 0.150.6, lobe-chat had an unauthorized Server-Side Request Forgery vulnerability in the /api/proxy endpoint. An attacker can construct malicious requests to cause Server-Side Request Forgery without logging in, attack intranet services, and leak sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.524
EPSS Ranking 97.8%
CVSS Severity
CVSS v3 Score 9.0
Products affected by CVE-2024-32964


Contact Us

Shodan ® - All rights reserved