Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-332g-rf22-2vcg

Опубликовано: 20 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

EPSS

Процентиль: 35%
0.00145
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-23

Связанные уязвимости

CVSS3: 4.3
nvd
11 месяцев назад

A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

EPSS

Процентиль: 35%
0.00145
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-23