CVE-2024-11603

Server-Side Request Forgery in lm-sys/fastchat

State: Published
Severity: 7.5 High
Published: Mar 20, 2025
Updated: Mar 20, 2025
Reserved: Nov 21, 2024

Description

A Server-Side Request Forgery (SSRF) vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the `/queue/join?` endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal networks or the AWS metadata endpoint, potentially exposing sensitive data and compromising internal servers.

Scores

CVSS	Score	Vector	Source
3.0	7.5 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	@huntr_ai

Weaknesses

CWE-918 Server-Side Request Forgery (SSRF)

Affected Products

Product	Versions
lm-sys/fastchatlm-sys	latest and earlierAffected

References

https://huntr.com/bounties/89f1158d-4a75-4000-a1bd-f82dd1a62bff

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.