There are advantages to using standalone AI chatbots over cloud-based alternatives such as OpenAI; however, there are also some security risks.
Research shows NextChat, a popular standalone chatbot with over 7500 exposed instances, is vulnerable to a critical SSRF vulnerability (CVE-2023-49785) that allows attackers to access internal systems and data potentially.
The vulnerability was reported to the vendor in November 2023, but with no patch available after 90 days, technical details are being publicly released.
NextChat, a Javascript application built with Next.js, exposes a critical vulnerability. Its core functionality runs on the client side. A server-side endpoint named “/api/cors” acts as an open proxy that allows anyone to send unauthorized requests to any external server.
Designed to enable saving chat data on WebDAV servers, this endpoint bypasses browser security measures.
Users can exploit it to access unintended resources by crafting requests that the application blindly forwards, as a user could access Google through this loophole.
A critical Server-Side Request Forgery (SSRF) vulnerability exists, allowing attackers to gain unauthorized access to internal systems and potentially the entire network. This vulnerability grants attackers the ability to:
If the application is web-accessible, an attacker can potentially compromise the entire internal network connected to the application. While limitations exist in directly injecting specific headers, potential workarounds might exist.
This vulnerability is particularly dangerous due to its extensive access capabilities and potential for sensitive data exfiltration.
A specific reflected XSS vulnerability bypasses the need for external resources and the application’s /api/cors endpoint utilizes the fetch method, which allows the data protocol.
An attacker can inject a malicious payload into the data URL encoded in base64, which includes JavaScript code to display an alert with the website’s domain upon reaching the server.
Since the server reflects the data back to the client without proper sanitization, the script executes in the victim’s browser, resulting in a successful XSS attack.
A critical vulnerability (CVE-2023-49785) exists in ChatGPT-Next-Web (versions 2.11.2 and prior) that allows attackers full read and write access to internal systems through forged requests.
It can also exploit the application as an open proxy to mask their IP and redirect malicious traffic.
According to the Horizon3ai timeline for vulnerability disclosure:
Avoid using this software online. If internet exposure is unavoidable, a secure, isolated network without internal resource access is needed. Even in isolation, attackers might use the software as an open proxy to hide malicious traffic targeting other systems.
Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.
A very important message from the Norwegian National Cyber Security Centre (NCSC) says that Secure Socket Layer/Transport Layer Security (SSL/TLS)…
Linux is widely used in numerous servers, cloud infrastructure, and Internet of Things devices, which makes it an attractive target…
ViperSoftX malware, known for stealing cryptocurrency information, now leverages Tesseract, an open-source OCR engine, to target infected systems, which extracts…
Santander has confirmed that there was a major data breach that affected its workers and customers in Spain, Uruguay, and…
The U.S. government has offered a prize of up to $5 million for information that leads to the arrest and…
Russia leverages a mix of state-backed Advanced Persistent Threat (APT) groups and financially motivated cybercriminals to achieve its strategic goals,…