CNNVD-202512-2036 Information
Dec 11, 2025
cve
CNNVD ID
CNNVD-202512-2036
Related CVE
- CNNVD Published: 2025-12-11
Description (Chinese)
LibreChat是Danny Avila个人开发者的一个增强的 ChatGPT 克隆。 LibreChat 0.8.0及之前版本存在安全漏洞，该漏洞源于iconURL参数可被修改，可能导致存储型跨站脚本攻击和隐私泄露。
Description (English)
LibreChat is an enhanced ChatGPT clone of Danny Avila’s personal developer. There is a security loophole in LibreChat 0.8.0 and previous versions, which stems from the modification of iconURL parameters, which may result in storage-type cross-site script attacks and privacy leaks.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-12-11
Last Modified
2026-02-24
References
https://github.com/danny-avila/LibreChat/commit/6fa94d3eb8f5779363226d10dccf8b01a735744c https://github.com/danny-avila/LibreChat/security/advisories/GHSA-84vx-vmcf-xgpp
Patch
https://github.com/danny-avila/LibreChat/releases
Share on: