ByteOS Network

NVD Vulnerability Details :

CVE-2024-12376

Analyzed

Source-security@huntr.dev

Published At-20 Mar, 2025 | 10:15

Updated At-31 Jul, 2025 | 14:37

A Server-Side Request Forgery (SSRF) vulnerability was identified in the lm-sys/fastchat web server, specifically in the affected version git 2c68a13. This vulnerability allows an attacker to access internal server resources and data that are otherwise inaccessible, such as AWS metadata credentials.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 3.0

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CPE Matches

lm-sys>>fastchat>>2024-10-05

cpe:2.3:a:lm-sys:fastchat:2024-10-05:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-918	Primary	security@huntr.dev

CWE ID: CWE-918

Type: Primary

Source: security@huntr.dev

References

Hyperlink	Source	Resource
https://huntr.com/bounties/c9cc3f28-ee9f-4d2d-9ee5-8c6455a11892	security@huntr.dev	Exploit Third Party Advisory

Hyperlink: https://huntr.com/bounties/c9cc3f28-ee9f-4d2d-9ee5-8c6455a11892

Source: security@huntr.dev

Resource:

Exploit

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History