Description
ChatGPT-Next-Web suffers from a combined SSRF and XSS vulnerability allowing full-read capabilities and cross-site scripting through specially crafted HTTP requests.
Remediation
Restrict access to ChatGPT-Next-Web from the Internet and update to a version with the vulnerability patched.
References
Related Vulnerabilities
Lighttpd Other Vulnerability (CVE-2007-3946)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-7128)
phpMyAdmin Other Vulnerability (CVE-2005-2869)
WordPress Plugin Blog Designer Cross-Site Scripting (1.8.11)
phpBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-6506)