Description

BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint. The vulnerability arises from the `hf_chat_template` method processing the `chat_template` parameter from the `tokenizer_config.json` file through the Jinja template engine without proper sanitization. Attackers can exploit this by crafting malicious `tokenizer_config.json` files that execute arbitrary code on the server.

INFO

Published Date :

2024-04-10T17:07:52.935Z

Last Modified :

2024-08-01T19:32:42.587Z

Source :

@huntr_ai
AFFECTED PRODUCTS

The following products are affected by CVE-2024-2952 vulnerability.

Vendors Products
Berriai
  • Litellm
Litellm
  • Litellm
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-2952.

URL Resource
https://github.com/berriai/litellm/commit/8a1cdc901708b07b7ff4eca20f9cb0f1f0e8d0b3 cve-icon cve-icon cve-icon
https://huntr.com/bounties/a9e0a164-6de0-43a4-a640-0cbfb54220a4 cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact