Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in `src/app/api/proxy/route.ts` does not consider redirect and could be bypassed when attacker provides an external malicious URL which redirects to internal resources like a private network or loopback address. Version 1.19.13 contains an improved fix for the issue.

According to the self-reported version in its response header, the version of LobeChat hosted on the remote web server is prior to 1.19.13. It is, therefore, affected by multiples Server-Side Request Forgery :

 - A Server-Side Request Forgery through proxy address

 - A Server-Side Request Forgery through through a bypass of a previous fix

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side
    request forgery protection implemented in `src/app/api/proxy/route.ts` does not consider redirect and
    could be bypassed when attacker provides an external malicious URL which redirects to internal resources
    like a private network or loopback address. Version 1.19.13 contains an improved fix for the issue.
    (CVE-2024-47066)

ID	Name	Product	Family	Severity
114586	LobeChat < 1.19.13 Server-Side Request Forgery	Web App Scanning	Artificial Intelligence	high
409483	SCA: security update for @lobehub/chat (GHSA-3fc8-2r3f-8wrg)	Tenable Cloud Security	SCA Checks	medium
409483	SCA: security update for @lobehub/chat (GHSA-3fc8-2r3f-8wrg)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2024-47066

medium

Tenable Plugins

high

medium

medium