Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mq4w-5hp5-6g52

Опубликовано: 20 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware. This can lead to arbitrary file write and potentially remote code execution. The issue is fixed in version 0.7.6.

A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware. This can lead to arbitrary file write and potentially remote code execution. The issue is fixed in version 0.7.6.

EPSS

Процентиль: 86%
0.02883
Низкий

8.8 High

CVSS3

Дефекты

CWE-29

Связанные уязвимости

CVSS3: 8.8
nvd
11 месяцев назад

A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware. This can lead to arbitrary file write and potentially remote code execution. The issue is fixed in version 0.7.6.

EPSS

Процентиль: 86%
0.02883
Низкий

8.8 High

CVSS3

Дефекты

CWE-29