CVE-2024-7983 — Denial of Service in open-webui/open-webui
In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A maliciously crafted markdown payload can cause the server to spe…
Published: 2025-03-20 · CVSS: 7.5 · CVSS 3.0
In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A maliciously crafted markdown payload can cause the server to spend excessive time converting it, leading to a denial of service. The server becomes unresponsive to other requests until the conversion is complete.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7