CVE-2024-7038: open-webui Information Disclosure via File Enumeration and Directory Traversal
Summary
CVE-2024-7038: An information disclosure vulnerability exists in open-webui version 0.3.8. Affects open-webui versions < 0.3.8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
open-webui is an open-source web application designed for user-friendly interaction with various models and data. It allows users to manage and update model paths through an admin interface. However, its error handling mechanism exposes sensitive information, making it vulnerable to exploitation.
Vulnerability Detail
An information disclosure vulnerability exists in open-webui version 0.3.8. This issue arises from the embedding model update feature in the admin settings. When a user attempts to update the model path, the system checks for the file's existence and returns different error messages based on the result. This behavior can be exploited by an attacker to enumerate file names and traverse directories, potentially leading to the exposure of sensitive information. The vulnerability is categorized under CWE-200, indicating improper handling of sensitive information.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, administrators can limit access to the admin settings or implement stricter error handling to avoid revealing file existence through error messages. This may involve modifying the error response to be more generic and not disclose specific file paths.
Conclusion
In summary, CVE-2024-7038 is a low-severity information disclosure vulnerability in open-webui that can lead to file enumeration and directory traversal. Users are advised to update to a patched version to mitigate the risk and consider implementing workarounds in the meantime.
See every vulnerability recorded for open-webui →
FAQ
CVE-2024-7038 is a vulnerability in open-webui that allows attackers to enumerate file names and traverse directories by observing error messages.
The vulnerability affects open-webui version 0.3.8 and earlier versions.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to the exposure of sensitive information, which may be exploited by attackers for unauthorized access or data breaches.
Yes, the CVSS score for this vulnerability is 2.7, indicating a low severity level.
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
