CVE-2025-6855

Опубликовано: 29 июн. 2025

Источник: nvd

CVSS3: 5.5

CVSS3: 8.8

CVSS2: 5.2

EPSS Низкий

Описание

A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may be used.

Ссылки

https://github.com/chatchat-space/Langchain-Chatchat/issues/5354
Exploit
Issue Tracking
Vendor Advisory
https://vuldb.com/?ctiid.314327
Permissions Required
VDB Entry
https://vuldb.com/?id.314327
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.601162
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:chatchat-space:langchain-chatchat:*:*:*:*:*:*:*:*

Версия до 0.3.1 (включая)

EPSS

Процентиль: 27%

0.00095

Низкий

5.5 Medium

CVSS3

8.8 High

CVSS3

5.2 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-f823-phmg-x5fr

CVSS3: 5.5

github

7 месяцев назад

Langchain-Chatchat vulnerable to path traversal

EPSS

Процентиль: 27%

0.00095

Низкий

5.5 Medium

CVSS3

8.8 High

CVSS3

5.2 Medium

CVSS2

Дефекты

CWE-22