Описание
A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the logs_dir parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.
Ссылки
- Vendor Advisory
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:redhat:instructlab:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_ai:3.0:*:*:*:*:*:*:*
EPSS
Процентиль: 6%
0.00164
Низкий
7.1 High
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 7.1
redhat
4 месяца назад
A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.
EPSS
Процентиль: 6%
0.00164
Низкий
7.1 High
CVSS3
Дефекты
CWE-22