CVE-2024-7049: Exposure of Token in open-webui/open-webui
Published Oct 10, 2024
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
openwebui Open WebUI=0.3.8
Event History
Oct 10, 2024
CVE Published
via MITRE·07:15 AM
Rejected
via MITRE·07:15 AM
Data Sourced
via NVD·08:15 AM
Description
Sep 11, 2026
Rejected
via MITRE·09:21 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-7049?
CVE-2024-7049 is considered a critical vulnerability due to its potential to allow unauthorized actions without admin approval.
2
How do I fix CVE-2024-7049?
To fix CVE-2024-7049, update to the latest version of open-webui that addresses this vulnerability.
3
Who is affected by CVE-2024-7049?
Users of open-webui version 0.3.8 are affected by CVE-2024-7049 due to improper role handling.
4
What are the consequences of CVE-2024-7049?
The consequences of CVE-2024-7049 include potential unauthorized access and actions performed by users with pending roles.
5
What types of actions can be bypassed due to CVE-2024-7049?
CVE-2024-7049 allows users to perform actions that normally require admin confirmation, circumventing the approval process.