CriticalVulnerabilityLLM-specific
CVE-2023-49785: NextChat server-side request forgery and cross-site scripting
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2023-49785
- Published
- Record updated
- Affected
- nextchat <= 2.11.2
- Fixed in
- No fixed version was stated when the source was last read.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 83.2%
Summary
NextChat, also known as ChatGPT-Next-Web, versions 2.11.2 and prior, is vulnerable to server-side request forgery and cross-site scripting. The flaw gives read access to internal HTTP endpoints and write access using HTTP POST, PUT, and other methods, and lets attackers relay traffic through the application as an open proxy to mask their source IP.
Mitigation
As of time of publication, no patch is available. Mitigation strategies are: avoid exposing the application to the public internet, or, if it must be internet-facing, run it on an isolated network with no access to other internal resources.
Related items
- MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
- HighCVE-2026-107685: req_llm WebSocket streaming client accepts untrusted TLS certificatesSame vendor · NVD/CVE Database
- MediumCVE-2026-113459: TYPO3 OpenAI API key exposed to backend users in page sourceSame vendor · NVD/CVE Database
- MediumCVE-2026-109296: Open WebUI missing authorization lets users reach disabled model backendsSame vendor · NVD/CVE Database
- MediumCVE-2026-107430: VideoWhisper Site Manager for ChatGPT, Claude, Codex missing authorization checkSame vendor · NVD/CVE Database