References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT file handlers authorize an unrelated resource and then sign or read an S3 object using a key taken directly from the request, without checking that the key belongs to the caller's team. Because S3 object keys are global within the bucket and carry the tenant id only as a path segment, an attacker can supply another team's key and obtain its file contents through the chat-file presign endpoint or dataset preview endpoint. This issue is fixed in version v4.15.0-beta5.

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE-639

https://github.com/labring/FastGPT/commit/decb6d2fb1417fb9e2bca145d2dcc9cbcf06396c

https://github.com/labring/FastGPT/pull/7104

https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5

https://github.com/labring/FastGPT/security/advisories/GHSA-6rxv-p43w-mmx5

[{"vendor":"labring","product":"FastGPT","versions":[{"version":"< 4.15.0-beta5","status":"affected"}]}]