CVE-2024-39719

n/a / n/a PUBLISHED

Description (CNA)

An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When calling the CreateModel route with a path parameter that does not exist, it reflects the "File does not exist" error message to the attacker, providing a primitive for file existence on the server.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.oligo.security/blog/more-models-more-probllms

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.