Advisories · Technology
oobabooga text-generation-webui.
Every CVE that names oobabooga text-generation-webui among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication
- oobabooga text-generation-webui
- Path traversal
- CVSS 7.5 High
text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation
- oobabooga text-generation-webui
- Server-side request forgery (SSRF)
- CVSS 7.5 High
text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication
- oobabooga text-generation-webui
- Path traversal
- CVSS 5.3 Medium
text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication
- oobabooga text-generation-webui
- Path traversal
- CVSS 5.3 Medium
text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication
- oobabooga text-generation-webui
- Path traversal
- CVSS 9.1 CriticalCritical · CVSS 9+
text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".
- oobabooga text-generation-webui
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
- oobabooga text-generation-webui
- CWE-807
- CVSS 9.8 CriticalCritical · CVSS 9+
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
- oobabooga text-generation-webui
- CWE-807
- CVSS 6.2 Medium
text-generation-webui allows arbitrary file read via symbolic link upload
- oobabooga text-generation-webui
- Path traversal