CVE-2024-10908 — Open Redirect in lm-sys/fastchat
An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. T…
Published: 2025-03-20 · CVSS: 6.1 · CVSS 3.0
An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7