GHSA-77cj-rv5x-v6r2MediumCVSS 6.1
FastChat open redirect vulnerability
🔗 CVE IDs covered (1)
📋 Description
An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
🎯 Affected products1
- pip/fschat:<= 0.2.36