Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-6583

Path Traversal in stangirard/quivr

Description

A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

stangirard stangirard/quivr

  • unspecified to ≤ latestaffected

References