CVE-2024-47066
Critical · 9.0lobe-chat implemented an insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)
CVSS
9.0
EPSS
11.9%
Published
Sep 23, 2024
CISA due date
—
The record
SSRF protection implemented in https://github.com/lobehub/lobe-chat/blob/main/src/app/api/proxy/route.ts does not consider redirect and could be bypassed when attacker provides external malicious url which redirects to internal resources like private network or loopback address.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @lobehub/chat | 0 | 0.150.6 |
| npm | @lobehub/chat | 0 | 1.19.13 |
Related vulnerabilities
- GHSA-wrrr-8jcv-wjf5 LobeHub Vulnerable to Improper Authorization in Presigned Upload Also affects @lobehub/chat
- CVE-2026-23835 LobeHub is an open source human-and-AI-agent network. Also affects @lobehub/chat
- GHSA-4gpc-rhpj-9443 Lobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code… Also affects @lobehub/chat
- GHSA-j7xp-4mg9-x28r Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion Also affects @lobehub/chat
- CVE-2026-23522 LobeChat is an open source chat application platform. Also affects @lobehub/chat
- CVE-2026-23733 LobeChat is an open source chat application platform. Also affects @lobehub/chat
- CVE-2024-32965 @lobehub/chat Server Side Request Forgery vulnerability Also affects @lobehub/chat
- CVE-2026-114730 Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a… CWE-918