github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-03-17 20:43:32 -05:00
Code Issues 308 Packages Projects Releases 100 Wiki Activity

profile_image_url is an injection vulnerability #947

New Issue
Closed
opened 2025-11-11 14:34:08 -06:00 by GiteaMirror · 0 comments
GiteaMirror commented 2025-11-11 14:34:08 -06:00
Owner
Copy Link

Originally created by @qrdlgit on GitHub (May 17, 2024).

I reported this as a security issue but it was ignored, so I am reporting it here. A user can signup with their own profile image url and there are no checks done on this and rendered on the front end as is. It can be used to track ip addresses, set tracking cookies, xss on older web browsers, do internal get references on private ips, etc.

Originally created by @qrdlgit on GitHub (May 17, 2024). I reported this as a security issue but it was ignored, so I am reporting it here. A user can signup with their own profile image url and there are no checks done on this and rendered on the front end as is. It can be used to track ip addresses, set tracking cookies, xss on older web browsers, do internal get references on private ips, etc.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#947
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?