Update CVE-2024-6587.yaml

main
Ritik Chaddha 2024-07-25 14:14:35 +05:30 committed by GitHub
parent e54eb32b1a
commit ec0c76dd96
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 1 deletions

View File

@ -1,11 +1,14 @@
id: CVE-2024-6587
info:
name: LiteLLM Blind - SSRF Exposes OpenAI API Keys
name: LiteLLM - Server-Side Request Forgery
author: pdresearch,iamnoooob,rootxharsh,lambdasawa
severity: high
description: |
LiteLLM vulnerable to Server-Side Request Forgery (SSRF) vulnerability Exposes OpenAI API Keys.
reference:
- https://huntr.com/bounties/4001e1a2-7b7a-4776-a3ae-e6692ec3d997
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6587
metadata:
verified: true
max-request: 1