Threats tagged 'ghsa-5rpq-mc2h-94cc'

easyVoice versions before 0.0.23 have a server-side request forgery (SSRF) vulnerability. This flaw allows unauthenticated attackers to make the server send POST requests to internal or loopback services by manipulating the openaiBaseUrl parameter with useLLM enabled. Attackers can probe internal hosts and ports via the /api/v1/tts endpoint, leveraging reflected error messages in the x-generate-tts-warning header.