Threats tagged 'ghsa-cv87-px3c-7h2j'

A vulnerability exists in ChatGPTNextWeb NextChat up to version 2.16.1 involving the Next.js API Endpoint component. The flaw allows manipulation that results in a permissive cross-domain policy with untrusted domains. This vulnerability can be exploited remotely and has publicly available exploit code. The project has been notified but has not yet responded or issued a fix.