CVE-2025-0330highCWE-1230

CVE-2025-0330: falha de alta gravidade em berriai/litellm

Exposure of Sensitive Information in berriai/litellm

Publicada em

Seguir esta CVE+ Monitorar berriai/litellm+ Monitorar litellm

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.6%
In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This vulnerability exposes sensitive information, including langfuse_secret and langfuse_public_key, which can provide full access to the Langfuse project storing all requests.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
berriai · berriai/litellm
CVEs relacionadas — berriai/litellm

No mesmo produto, das mais perigosas para as menos.

CVE-2024-6587HIGHSSRF in berriai/litellmEPSS 34.4%CVE-2024-6825HIGHRemote Code Execution in BerriAI/litellmEPSS 1.7%CVE-2024-2952CRITICALServer-Side Template Injection in BerriAI/litellmEPSS 1.3%CVE-2024-4264CRITICALRemote Code Execution in berriai/litellmEPSS 0.9%CVE-2024-5751CRITICALRemote Code Execution in BerriAI/litellmEPSS 0.9%CVE-2024-4889HIGHCode Injection in berriai/litellmEPSS 0.9%