← CVE Intelligence

CVE-2024-6707

Open WebUI Arbitrary File Upload + Path Traversal PUBLISHED

Description (CNA)

Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.

Affected (CNA)

Vendor / productVersions
Open WebUI / Open WebUIaffected 0.1.105

CWE

CWE-22, CWE-434

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.