CVE-2023-49785 — AI Deep Analysis Summary

Q: What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: NextChat suffers from **SSRF** & **XSS** flaws. 📉 **Consequences**: Attackers can read internal HTTP endpoints & execute malicious scripts. Critical data exposure risk!

Q: Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-918** (Server-Side Request Forgery). The app fails to properly validate user-supplied URLs, allowing requests to internal resources. 🚫

Q: Who is affected? (Versions/Components)

👥 **Affected**: **ChatGPTNextWeb** product, specifically **NextChat v2.11.2 and earlier**. 📦 If you are running an older version, you are at risk!

Q: What can hackers do? (Privileges/Data)

💀 **Attacker Actions**: 1️⃣ Read internal HTTP endpoints (SSRF). 2️⃣ Execute Cross-Site Scripting (XSS). 📊 **Impact**: High Confidentiality & Integrity loss (CVSS C:H, I:H).

Q: Is exploitation threshold high? (Auth/Config)

⚡ **Threshold**: **LOW**. ⚠️ Vector: AV:N/AC:L/PR:N/UI:N/S:U. No auth required! No user interaction needed! Easy to exploit remotely. 🎯

Q: Is there a public Exp? (PoC/Wild Exploitation)

🔓 **Public Exp?**: **YES**. 📝 PoCs available on GitHub (e.g., Nuclei templates, hyunnna repo). Wild exploitation is possible using these templates. 🚀

Q: How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan for **NextChat** instances. Use **Nuclei** with the CVE-2023-49785 template. Check if your version is ≤ 2.11.2. 🧪

Q: Is it fixed officially? (Patch/Mitigation)

🩹 **Fix Status**: **YES**. The vendor (ChatGPTNextWeb) has addressed this. 🔄 **Action**: Update to the latest version immediately! Check the official GitHub repo. ✅

Q: What if no patch? (Workaround)

🛑 **No Patch?**: If you can't update, **block external access** to the SSRF endpoint. Implement strict **URL allowlists** or WAF rules to prevent internal requests. 🚧

Q: Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **HIGH**. 🚨 CVSS Score indicates High Impact. No auth needed. Public PoCs exist. Patch **NOW** to prevent internal network scraping & XSS attacks! ⏳

Updated May 08, 2026 CVSS 9.1 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: NextChat suffers from **SSRF** & **XSS** flaws. 📉 **Consequences**: Attackers can read internal HTTP endpoints & execute malicious scripts. Critical data exposure risk!

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-918** (Server-Side Request Forgery). The app fails to properly validate user-supplied URLs, allowing requests to internal resources. 🚫

Q3Who is affected? (Versions/Components)

👥 **Affected**: **ChatGPTNextWeb** product, specifically **NextChat v2.11.2 and earlier**. 📦 If you are running an older version, you are at risk!

Q4What can hackers do? (Privileges/Data)

💀 **Attacker Actions**: 1️⃣ Read internal HTTP endpoints (SSRF). 2️⃣ Execute Cross-Site Scripting (XSS). 📊 **Impact**: High Confidentiality & Integrity loss (CVSS C:H, I:H).

Q5Is exploitation threshold high? (Auth/Config)

⚡ **Threshold**: **LOW**. ⚠️ Vector: AV:N/AC:L/PR:N/UI:N/S:U. No auth required! No user interaction needed! Easy to exploit remotely. 🎯

Q6Is there a public Exp? (PoC/Wild Exploitation)

🔓 **Public Exp?**: **YES**. 📝 PoCs available on GitHub (e.g., Nuclei templates, hyunnna repo). Wild exploitation is possible using these templates. 🚀

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan for **NextChat** instances. Use **Nuclei** with the CVE-2023-49785 template. Check if your version is ≤ 2.11.2. 🧪

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Fix Status**: **YES**. The vendor (ChatGPTNextWeb) has addressed this. 🔄 **Action**: Update to the latest version immediately! Check the official GitHub repo. ✅

Q9What if no patch? (Workaround)

🛑 **No Patch?**: If you can't update, **block external access** to the SSRF endpoint. Implement strict **URL allowlists** or WAF rules to prevent internal requests. 🚧

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **HIGH**. 🚨 CVSS Score indicates High Impact. No auth needed. Public PoCs exist. Patch **NOW** to prevent internal network scraping & XSS attacks! ⏳

Continue exploring

Vulnerability detail Full AI analysis (login) ChatGPTNextWeb CWE-918