CVE-2024-7043: Open WebUI Arbitrary File Reading and Deletion Vulnerability
Summary
CVE-2024-7043: Open WebUI Allows Arbitrary File Reading and Deletion. Affects open-webui versions < 0.3.8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open WebUI is a web-based user interface designed for managing and interacting with various applications and services. It allows users to upload, view, and manage files through a user-friendly interface. However, the application has a critical vulnerability that stems from improper access control, which can lead to unauthorized file access and deletion.
Vulnerability Detail
An improper access control vulnerability in open-webui version 0.3.8 allows attackers to view and delete any files uploaded by users. The application does not verify whether the attacker is an administrator, enabling them to exploit the GET /api/v1/files/ interface to retrieve information on all files, including their ID values. This can lead to unauthorized access to sensitive data and potential data loss, as attackers can also use the DELETE /api/v1/files/{file_id} interface to delete any file.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, restrict access to the API endpoints by implementing proper authentication and authorization checks. This can be done by modifying the server-side code to ensure that only authorized users can access the file management endpoints.
Conclusion
The Open WebUI vulnerability (CVE-2024-7043) poses significant risks due to improper access controls, allowing unauthorized file access and deletion. It is crucial to update to the latest version of the package and implement proper security measures to mitigate these risks.
See every vulnerability recorded for open-webui →
FAQ
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
The affected version is open-webui v0.3.8. Versions prior to this may also be vulnerable if they lack proper access controls.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The consequences include unauthorized access to sensitive files and the ability to delete important data, which can lead to data breaches and loss of integrity.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just the Pipfile.lock.
References
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
