CPE

Cpe:2.3:a:open-Webui:open-Webui::::::::

1 brief RSS

Cross-Origin Message Handling Vulnerability in Open WebUI

Open WebUI versions 0.7.0 through 0.11.3 contain a cross-origin message handling vulnerability that allows unauthenticated websites to steal a user's session JWT via a crafted postMessage payload.

Open WebUI +1 web-vulnerability cross-origin authentication-bypass api-security

3t 1c 2h ago

Cpe:2.3:a:open-Webui:open-Webui:*:*:*:*:*:*:*:*

Cross-Origin Message Handling Vulnerability in Open WebUI

Cpe:2.3:a:open-Webui:open-Webui::::::::