Skip to main content

Improper Neutralization of Equivalent Special Elements

CVE-2024-2952

High
9.8/10

Summary

The package litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint. The vulnerability arises from the `hf_chat_template` method processing the `chat_template` parameter from the `tokenizer_config.json` file through the Jinja template engine without proper sanitization. Attackers can exploit this by crafting malicious `tokenizer_config.json` files that execute arbitrary code on the server. This vulnerability affects litellm package versions 0.1.805 through 0.1.824, 0.2.5 through 1.34.41, and 1.35.0.dev1.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-76 - Improper Neutralization of Equivalent Special Elements

The software properly neutralizes certain special elements, but it improperly neutralizes equivalent special elements.

References

Advisory Timeline

  • Published