nextchat records

4 published records for vendor nextchat.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
64This week	CVE-2023-49785Proof of concept	NextChat vulnerable to Server-Side Request Forgery and Cross-site Scriptingnextchat · nextchat · CWE-79 Pre-auth SSRF XSS	Critical9.8	—	83.2%	Mar 11, 2024
30Monitor	CVE-2025-50735No exploit	Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in itsnextchat · nextchat · CWE-22 Pre-auth Path traversal	High7.5	—	0.9%	Nov 3, 2025
22Monitor	CVE-2026-7177No exploit	ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgerynextchat · nextchat · CWE-918 Pre-auth SSRF	Medium5.5	—	0.6%	Apr 27, 2026
22Monitor	CVE-2026-7178No exploit	ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgerynextchat · nextchat · CWE-918 Pre-auth SSRF	Medium5.5	—	0.6%	Apr 27, 2026

CVE-2023-49785
64This week
NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting
CriticalCVSS 9.8Proof of conceptEPSS 83%
nextchat · nextchatMar 11, 2024
CVE-2025-50735
30Monitor
Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
nextchat · nextchatNov 3, 2025
CVE-2026-7177
22Monitor
ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery
MediumCVSS 5.5No exploitEPSS 1%
- Pre-auth
- SSRF
nextchat · nextchatApr 27, 2026
CVE-2026-7178
22Monitor
ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery
MediumCVSS 5.5No exploitEPSS 1%
- Pre-auth
- SSRF
nextchat · nextchatApr 27, 2026