CVE-2024-6583 — Path Traversal in stangirard/quivr

CVE-2024-6583

Path Traversal in stangirard/quivr PUBLISHED

Description (CNA)

A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

Affected (CNA)

Vendor / product	Versions
stangirard / stangirard/quivr	affected unspecified through latest

CWE

CWE-23

References

https://huntr.com/bounties/c310b500-ec26-4121-8d3a-8e863181346f

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.