NextChat - Server-Side Request Forgery
NextChat v2.12.3 suffers from a Server-Side Request Forgery (SSRF) and Cross-Site Scripting vulnerability due to a lack of validation of the GET parameter on the WebDav API endpoint.
NextChatPoC 已收录
CVSS7.4EPSS 37.8%