VendorsOpen WebUIopen_webui0.3.8
Vulnerabilities

Open WebUI Open Webui 0.3.8

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2024-7044
Stored XSS in open-webui/open-webui
Published 2025-03-20 · Analyzed
8.9EPSS 0.005
CVE-2024-7043
Improper Access Control in open-webui/open-webui
Published 2025-03-20 · Modified
8.8EPSS 0.006
CVE-2024-7983
Denial of Service in open-webui/open-webui
Published 2025-03-20 · Modified
7.5EPSS 0.009
CVE-2024-7035
Cross-Site Request Forgery (CSRF) in open-webui/open-webui
Published 2025-03-20 · Analyzed
6.9EPSS 0.084
CVE-2024-7041
IDOR in open-webui/open-webui
Published 2024-10-09 · Modified
6.5EPSS 0.004
CVE-2024-7048
IDOR in open-webui/open-webui
Published 2024-10-10 · Modified
6.3EPSS 0.004
CVE-2024-7049
Exposure of Token in open-webui/open-webui
Published 2024-10-10 · Rejected
n/aEPSS 0.003