CVE-2024-10044 SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat
Attackers can exploit SSRF in the FastChat controller API to access unauthorized web resources or perform actions using server credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-10044?
CVE-2024-10044 is a critical server-side request forgery vulnerability in lm-sys/fastchat, published on 30 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Controller API Server in lm-sys/fastchat, as of commit e208d5677c6837d590b81cb03847c0b9de100765. This vulnerability allows attackers to exploit the victim controller API server's credentials to perform unauthorized web actions or access unauthorized web resources by combining it with the POST /register_worker endpoint.
Weakness: CWE-918
Which versions are affected by CVE-2024-10044?
It affects 1 product.
Products include Lm-Sys Fastchat.
How do I fix CVE-2024-10044?
No fix has been published for CVE-2024-10044 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2024-10044 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-10044 exists.
Other vulnerabilities in lm-sys/fastchat
- CVE-2024-10907 Denial of Service (DoS) via Multipart Boundary in lm-sys/fastchat
- CVE-2024-10912 Denial of Service in lm-sys/fastchat
- CVE-2024-11603 Server-Side Request Forgery in lm-sys/fastchat
- CVE-2024-12376 Server Side Request Forgery in lm-sys/fastchat
- CVE-2024-10908 Open Redirect in lm-sys/fastchat
Sources
Also known as GHSA-h6qm-w442-h848.