CVE-2024-11603

A Server-Side Request Forgery (SSRF) vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the `/queue/join?` endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal networks or the AWS metadata endpoint, potentially exposing sensitive data and compromising internal servers.

• CWE-918

• https://huntr.com/bounties/89f1158d-4a75-4000-a1bd-f82dd1a62bffExploit, Third Party Advisory

Published

Mar 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11598Under specific circumstances, insecure permissions in Ivanti…7.8
• CVE-2024-11599Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11…5.3
• CVE-2024-1160The Bold Page Builder plugin for WordPress is vulnerable to …5.4
• CVE-2024-11600The Borderless – Widgets, Elements, Templates and Toolkit fo…7.2
• CVE-2024-11601The Sky Addons for Elementor (Free Templates Library, Live C…8.1
• CVE-2024-11602A Cross-Origin Resource Sharing (CORS) vulnerability exists …7.4
• CVE-2024-11604Insertion of Sensitive Information into Log File vulnerabili…7.3
• CVE-2024-11605The wp-publications WordPress plugin through 1.2 does not es…4.8
• CVE-2024-11606The Tabs Shortcode WordPress plugin through 2.0.2 does not v…5.3
• CVE-2024-11607The GTPayment Donations WordPress plugin through 1.0.0 does …6.1
• CVE-2024-11608A maliciously crafted SKP file, when linked or imported into…7.8
• CVE-2024-11609AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Bu…7.8