CVE-2024-12376

Summary

CVE-2024-12376 is a newly identified Server-Side Request Forgery (SSRF) vulnerability affecting the lm-sys/fastchat web server, specifically the version git 2c68a13. This issue permits unauthorized access to internal server resources and data, including Amazon Web Services (AWS) metadata credentials, by enabling attackers to manipulate malicious HTTP requests. Successful exploitation could potentially lead to data leaks, unauthorized access, and other malicious activities. Users are encouraged to update their web server versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.