---
id: 10218
title: "[CVE-2023-49785] NextChat: An AI Chatbot That Lets You Talk to Anyone You Want To"
cve: CVE-2023-49785
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/disclosures/nextchat-an-ai-chatbot-that-lets-you-talk-to-anyone-you-want-to/"
published_at: "2024-03-11T13:01:55Z"
tags: ["ai-security", "vulnerability-research", "ssrf"]
phying_url: "https://phying.com/item/10218"
lang: en
---

# [CVE-2023-49785] NextChat: An AI Chatbot That Lets You Talk to Anyone You Want To

## Summary

NextChat a.k.a ChatGPT-Next-Web, a popular Gen AI ChatBot, is vulnerable to a critical server-side request forgery (SSRF) vulnerability.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2023-49785
- **Published:** 2024-03-11T13:01:55Z
- **Original:** https://horizon3.ai/attack-research/disclosures/nextchat-an-ai-chatbot-that-lets-you-talk-to-anyone-you-want-to/
- **Phying News:** https://phying.com/item/10218