Skip to content
Threat Feed
Subscribe

Product

Open WebUI (0.7.0 <= 0.11.3)

1 brief RSS
high advisory

Cross-Origin Message Handling Vulnerability in Open WebUI

Open WebUI versions 0.7.0 through 0.11.3 contain a cross-origin message handling vulnerability that allows unauthenticated websites to steal a user's session JWT via a crafted postMessage payload.

Open WebUI +1 web-vulnerability cross-origin authentication-bypass api-security
3t 1c