CVE-2024-47066

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in `src/app/api/proxy/route.ts` does not consider redirect and could be bypassed when attacker provides an external malicious URL which redirects to internal resources like a private network or loopback address. Version 1.19.13 contains an improved fix for the issue.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
lobehub	lobe-chat	< 1.19.13
lobehub	lobe_chat	< 1.19.13

References

https://github.com/lobehub/lobe-chat/blob/main/src/app/api/proxy/route.tsBroken Link
https://github.com/lobehub/lobe-chat/commit/e960a23b0c69a5762eb27d776d33dac443058fafPatch
https://github.com/lobehub/lobe-chat/security/advisories/GHSA-3fc8-2r3f-8wrgExploit, Third Party Advisory
https://github.com/lobehub/lobe-chat/security/advisories/GHSA-mxhq-xw3g-rphcNot Applicable

Timeline

Published: Sep 23, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-470676.1AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. Th CVE-2024-470686.1Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability wh CVE-2024-470696.1Oveleon Cookie Bar is a cookie bar is for the Contao Open Source CMS and allows a visitor to define cookie & privacy settings for the websit CVE-2024-47075.4The Materialis Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's materialis_contact_form shortcod CVE-2024-470709.0authentik is an open-source identity provider. A vulnerability that exists in versions prior to 2024.8.3 and 2024.6.5 allows bypassing passw CVE-2024-470716.8OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users una CVE-2024-470727.5XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminate the appl CVE-2024-470739.1DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In CVE-2024-470749.8DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customi CVE-2024-470756.1LayUI is a native minimalist modular Web UI component library. Versions prior to 2.9.17 have a DOM Clobbering vulnerability that can lead to CVE-2024-470768.6CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` p CVE-2024-470776.5authentik is an open-source identity provider. Prior to versions 2024.8.3 and 2024.6.5, access tokens issued to one application can be stole