{"data":{"id":"e1d3197d-1168-426f-afc1-a3a531c02789","title":"CVE-2023-49785: NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2…","summary":"NextChat, also known as ChatGPT-Next-Web, versions 2.11.2 and prior, is vulnerable to server-side request forgery and cross-site scripting. The flaw gives read access to internal HTTP endpoints and write access using HTTP POST, PUT, and other methods, and lets attackers relay traffic through the application as an open proxy to mask their source IP.","solution":"As of time of publication, no patch is available. Mitigation strategies are: avoid exposing the application to the public internet, or, if it must be internet-facing, run it on an isolated network with no access to other internal resources.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-49785","publishedAt":"2024-03-12T04:15:26.383Z","cveId":"CVE-2023-49785","cweIds":["CWE-79","CWE-918","CWE-79","CWE-918"],"cvssScore":"9.1","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["nextchat@<= 2.11.2"],"affectedPackageNames":["nextchat"],"affectedPackageRefs":["npm:nextchat"],"affectedVendors":["OpenAI"],"affectedVendorsRaw":["NextChat","ChatGPT-Next-Web","ChatGPT"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"NextChat server-side request forgery and cross-site scripting","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.83163,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-qf3q-9f3h-cjp9"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:56:25.063Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-198","CAPEC-664","CAPEC-86"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}