Open-WebUI SSRF bypass via WEB_FETCH_FILTER_LIST logic flaw

github.com 2026-07-10查看中文 →

Security AdvisoryHighopen-webui

Affected:

open-webui

Referenced CVEs: CVE-2026-59223 · 4.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Class and Exam Timetabling System V1.0 Pre-Auth SQL Injection Vulnerability with POC 2026-07-19 SQL Injection in Class and Exam Timetabling System V1.0 /edit_schoolyr.php with PoC 2026-07-19 Reflected XSS Vulnerability in Courier Management System V1.0 2026-07-19 Snap7 TSnap7MicroClient Heap Overflow in opWriteArea() via unbounded PDULength 2026-07-19 MoviePilot File Upload/Auth Bypass/Data Leak Vulnerabilities (CVE-Not Listed) 2026-07-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive