SSRF in Berriai Berriai/litellm
CVE-2024-6587
A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to the domain specified by `api_base`. This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.
Vulnerability class: SSRF (Server-Side Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.353 (98.4th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.353 · newest: 0.353 · change: 0.000
Affected products
- Berriai Berriai/litellm — versions unspecified
- Litellm — versions 1.38.10
Weakness classification (CWE)
Public proof-of-concept exploits
References
- huntr.com/bounties/4001e1a2-7b7a-4776-a3ae-e6692ec3d997 (Exploit, Third Party Advisory)
- github.com/berriai/litellm/commit/ba1912afd1b19e38d3704bb156adf887f91ae1e0 (Patch)
Frequently asked questions
- What is CVE-2024-6587?
- CVE-2024-6587 is a high-severity vulnerability in Berriai Berriai/litellm, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.5/10. Published 2024-09-13.
- How severe is CVE-2024-6587?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2024-6587 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.