A Server-Side Request Forgery (SSRF) vulnerability was identified in the lm-sys/fastchat web server, specifically in the affected version git 2c68a13. This vulnerability allows an attacker to access internal server resources and data that are otherwise inaccessible, such as AWS metadata credentials.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://huntr.com/bounties/c9cc3f28-ee9f-4d2d-9ee5-8c6455a11892 | Exploit Third Party Advisory |
Configurations
History
31 Jul 2025, 14:37
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Lm-sys
Lm-sys fastchat |
|
| CPE | cpe:2.3:a:lm-sys:fastchat:2024-10-05:*:*:*:*:*:*:* | |
| References | () https://huntr.com/bounties/c9cc3f28-ee9f-4d2d-9ee5-8c6455a11892 - Exploit, Third Party Advisory |
20 Mar 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-20 10:15
Updated : 2025-07-31 14:37
NVD link : CVE-2024-12376
Mitre link : CVE-2024-12376
JSON object : View
Products Affected
lm-sys
- fastchat
CWE
CWE-918
Server-Side Request Forgery (SSRF)