CVE-2024-12868

highrejectedpriority · track · 0EUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

— EPSS

no CVSS · high

Is it mine?

2 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · osv

Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-47874. Notes: All CVE users should reference CVE-2024-47874 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.

01

cvss

Technical severity, 0–10. One row per scoring source.

higha sovereign source's own severity rating (no CVSS score)

02

weaknesses

The CWE weakness classes this flaw belongs to.

03

affected products (2)

Products and version ranges known to be affected.

open-webui open-webui/open-webui≤ unspecified ≤latestenisa_euvdEU
PyPI open-webui< 0.5.8osvUSpkg:pypi/open-webui

04

also known as (3)

Other names and identifiers for this entity.

05

sources

Which sources assert this record, and when.

cnnvd enisa_euvd osv NVD CVE.org MITRE

published 2025-03-20modified 2026-10-26

06

references (1) cnnvd

External citations — patches, advisories, analysis.

https://huntr.com/bounties/56175583-70e3-4d53-94de-3f3a8e2423ec

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.