CVE-2024-10908
Open Redirect in lm-sys/fastchat
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Open Redirect in lm-sys/fastchat
An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
Reserved 2024-11-05 | Published 2025-03-20 | Updated 2025-03-20 | Assigner @huntr_aiCWE-601 URL Redirection to Untrusted Site
huntr.com/bounties/61f5e725-5579-4d08-8a88-e4ba04e6d1f2
Support options
