Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-6707

Open WebUI Arbitrary File Upload + Path Traversal

Description

Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open WebUI Open WebUI

Default version status: unaffected

  • 0.1.105affected

References