CVE-2024-7049

Vulnerability Description

In version v0.3.8 of open-webui/open-webui, a vulnerability exists where a token is returned when a user with a pending role logs in. This allows the user to perform actions without admin confirmation, bypassing the intended approval process.

Vulnerability Details

Published Date

October 10, 2024

Last Modified

October 17, 2024

Source

NVD

CVE-2024-7049

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment