GHSA-77cj-rv5x-v6r2MediumCVSS 6.1

FastChat open redirect vulnerability

Published
March 20, 2025
Last Modified
March 21, 2025

🔗 CVE IDs covered (1)

📋 Description

An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.

🎯 Affected products1

  • pip/fschat:<= 0.2.36

🔗 References (3)