Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-7015 State: PUBLISHED Published: 2024-09-09T14:03:05.328Z Last Updated: 2025-10-14T13:00:08.868Z Vendors: Profelis Informatics and Consulting Products: PassBox Problem Types: CWE-306 Description: Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse.This issue affects PassBox: before v1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1418
CVE ID: CVE-2024-7016 State: PUBLISHED Published: 2024-11-21T12:25:17.272Z Last Updated: 2025-09-16T13:46:13.608Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Smarttek Informatics Products: Smart Doctor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Smarttek Informatics Smart Doctor's allows Stored XSS required admin privileges.This issue affects Smart Doctor: through 21.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bil
did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1865
CVE ID: CVE-2024-7017 State: PUBLISHED Published: 2025-11-14T02:29:57.639Z Last Updated: 2025-11-15T04:56:14.560Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/338248595
CVE ID: CVE-2024-7018 State: PUBLISHED Published: 2024-09-23T21:56:29.423Z Last Updated: 2024-09-24T19:57:44.817Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issues.chromium.org/issues/333414305
CVE ID: CVE-2024-7019 State: PUBLISHED Published: 2024-09-23T21:56:29.796Z Last Updated: 2024-09-24T18:34:48.172Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issues.chromium.org/issues/41494315
CVE ID: CVE-2024-7020 State: PUBLISHED Published: 2024-09-23T21:56:30.121Z Last Updated: 2024-09-24T18:32:11.118Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issues.chromium.org/issues/40076065
CVE ID: CVE-2024-7021 State: PUBLISHED Published: 2025-11-14T02:29:58.550Z Last Updated: 2025-11-14T16:08:42.472Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html - https://issues.chromium.org/issues/40064701
CVE ID: CVE-2024-7022 State: PUBLISHED Published: 2024-09-23T21:56:30.382Z Last Updated: 2024-09-25T17:53:16.415Z Vendors: Google Products: Chrome Problem Types: CWE-457 Description: Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issues.chromium.org/issues/324690505
CVE ID: CVE-2024-7023 State: PUBLISHED Published: 2024-09-23T22:39:06.278Z Last Updated: 2024-09-24T19:04:05.187Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation in Updater in Google Chrome prior to 128.0.6537.0 allowed a remote attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium) Description: Insufficient data validation in Updater in Google Chrome prior to 128.0.6537.0 allowed a remote attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issues.chromium.org/issues/341803763
CVE ID: CVE-2024-7024 State: PUBLISHED Published: 2024-09-23T22:47:59.857Z Last Updated: 2024-09-25T17:48:19.609Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issues.chromium.org/issues/334120897
CVE ID: CVE-2024-7025 State: PUBLISHED Published: 2024-11-27T17:50:44.907Z Last Updated: 2024-11-27T19:16:35.320Z Vendors: Google Products: Chrome Problem Types: CWE-472 Description: Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/367764861
CVE ID: CVE-2024-7026 State: PUBLISHED Published: 2024-11-21T13:21:59.843Z Last Updated: 2025-01-09T16:31:58.161Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Teknogis Informatics Products: Closed Circuit Vehicle Tracking Software Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection.This issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst No
1.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1866
CVE ID: CVE-2024-7027 State: PUBLISHED Published: 2024-07-24T02:33:57.010Z Last Updated: 2024-08-01T21:45:38.460Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: WPWeb Products: WooCommerce - PDF Vouchers Problem Types: CWE-288 Description: The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.9.3. This is due to insufficient verification on the user being supplied during a QR code login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing Voucher Vendor user on the site, if they have access to the user id. Additional Analyst Notes: - CISA ADP
s any existing Voucher Vendor user on the site, if they have access to the user id. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b6cf27d9-c0be-4cff-8867-19297f6d79d7?source=cve - https://codecanyon.net/item/woocommerce-pdf-vouchers-ultimate-gift-cards-wordpress-plugin/7392046
CVE ID: CVE-2024-7029 State: PUBLISHED Published: 2024-08-02T15:08:35.991Z Last Updated: 2025-01-09T19:22:30.663Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AVTech Products: AVM1203 (IP Camera) Problem Types: CWE-77 Description: Commands can be injected over the network and executed without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07 - https://www.akamai.com/blog/security-research/2024-corona-mirai-botnet-infects-zero-day-sirt
CVE ID: CVE-2024-7030 State: PUBLISHED Published: 2024-08-21T05:30:21.658Z Last Updated: 2024-08-21T13:43:51.973Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: elbanyaoui Products: Smart Online Order for Clover Problem Types: CWE-862 Description: The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update product and category descriptions, category titles and images, and sort order. Additional Analyst Notes: - CI
to update product and category descriptions, category titles and images, and sort order. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8664fec3-4e11-4775-a5ca-b4f58931da76?source=cve - https://plugins.trac.wordpress.org/browser/clover-online-orders/trunk/admin/js/moo-OnlineOrders-admin.js - https://plugins.trac.wordpress.org/browser/clover-online-orders/trunk/public/moo-OnlineOrders-public.php
CVE ID: CVE-2024-7031 State: PUBLISHED Published: 2024-08-03T08:36:57.626Z Last Updated: 2024-08-09T18:41:01.896Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ninjateam Products: File Manager Pro – Filester Problem Types: CWE-862 Description: The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'njt_fs_saveSettingRestrictions' function in all versions up to, and including, 1.8.2. This makes it possible for authenticated attackers, with a role that has been granted permissions by an Administrator, to update the plugin settings for user role restrictions, including all
as been granted permissions by an Administrator, to update the plugin settings for user role restrictions, including allowing file types such as .php to be uploaded. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aef584bd-60a5-4bf2-b8d3-58e3b45e785e?source=cve - https://plugins.trac.wordpress.org/browser/filester/trunk/includes/File_manager/FileManager.php#L566 - https://plugins.trac.wordpress.org/changeset/3129722/
CVE ID: CVE-2024-7032 State: PUBLISHED Published: 2024-08-21T05:30:22.143Z Last Updated: 2024-08-21T13:39:39.456Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: elbanyaoui Products: Smart Online Order for Clover Problem Types: CWE-862 Description: The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndClean' function in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to deactivate the plugin and drop all plugin tables from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ww
nd drop all plugin tables from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9a6b05b1-c649-4b72-b884-11fb83ec77f2?source=cve - https://plugins.trac.wordpress.org/browser/clover-online-orders/trunk/moo_OnlineOrders.php#L183 - https://plugins.trac.wordpress.org/browser/clover-online-orders/trunk/includes/moo-OnlineOrders-deactivator.php#L29
CVE ID: CVE-2024-7033 State: PUBLISHED Published: 2025-03-20T10:09:54.529Z Last Updated: 2025-03-20T18:33:13.742Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-29 Description: In version 0.3.8 of open-webui/open-webui, an arbitrary file write vulnerability exists in the download_model endpoint. When deployed on Windows, the application improperly handles file paths, allowing an attacker to manipulate the file path to write files to arbitrary locations on the server's filesystem. This can result in overwriting critical system or application files, causing denial of service, or potentially achievi
. This can result in overwriting critical system or application files, causing denial of service, or potentially achieving remote code execution (RCE). RCE can allow an attacker to execute malicious code with the privileges of the user running the application, leading to a full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7078261f-8414-4bb7-9d72-a2a4d8bfd5d1
CVE ID: CVE-2024-7034 State: PUBLISHED Published: 2025-03-20T10:10:48.964Z Last Updated: 2025-03-20T18:16:14.120Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-22 Description: In open-webui version 0.3.8, the endpoint `/models/upload` is vulnerable to arbitrary file write due to improper handling of user-supplied filenames. The vulnerability arises from the usage of `file_path = f"{UPLOAD_DIR}/{file.filename}"` without proper input validation or sanitization. An attacker can exploit this by manipulating the `file.filename` parameter to include directory traversal sequences, causing the resulting
ploit this by manipulating the `file.filename` parameter to include directory traversal sequences, causing the resulting `file_path` to escape the intended `UPLOAD_DIR` and potentially overwrite arbitrary files on the system. This can lead to unauthorized modifications of system binaries, configuration files, or sensitive data, potentially enabling remote command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/711beada-10fe-4567-9278-80a689da8613
CVE ID: CVE-2024-7035 State: PUBLISHED Published: 2025-03-20T10:10:03.845Z Last Updated: 2025-03-20T18:31:53.390Z Severity: MEDIUM (CVSS 6.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-352 Description: In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset
ng a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/2ac81740-410b-467a-9244-75d82a6f9e11
CVE ID: CVE-2024-7036 State: PUBLISHED Published: 2025-03-20T10:09:57.731Z Last Updated: 2025-03-20T18:32:24.973Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-400 Description: A vulnerability in open-webui/open-webui v0.3.8 allows an unauthenticated attacker to sign up with excessively large text in the 'name' field, causing the Admin panel to become unresponsive. This prevents administrators from performing essential user management actions such as deleting, editing, or adding users. The vulnerability can also be exploited by authenticated users with low privileges, leading to the same unrespons
users. The vulnerability can also be exploited by authenticated users with low privileges, leading to the same unresponsive state in the Admin panel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ba62d093-ab27-48fa-9c53-0602c8cdc48a
CVE ID: CVE-2024-7037 State: PUBLISHED Published: 2024-10-09T19:52:21.784Z Last Updated: 2024-10-10T14:57:57.866Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-22 Description: In version v0.3.8 of open-webui/open-webui, the endpoint /api/pipelines/upload is vulnerable to arbitrary file write and delete due to unsanitized file.filename concatenation with CACHE_DIR. This vulnerability allows attackers to overwrite and delete system files, potentially leading to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/8508db68-9c99-4b1c-828c
ion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/8508db68-9c99-4b1c-828c-e1bfcacfb847
CVE ID: CVE-2024-7038 State: PUBLISHED Published: 2024-10-09T18:26:38.995Z Last Updated: 2024-11-03T18:27:26.279Z Severity: LOW (CVSS 2.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-209 Description: An information disclosure vulnerability exists in open-webui version 0.3.8. The vulnerability is related to the embedding model update feature under admin settings. When a user updates the model path, the system checks if the file exists and provides different error messages based on the existence and configuration of the file. This behavior allows an attacker to enumerate file names and traverse directories by observing the
guration of the file. This behavior allows an attacker to enumerate file names and traverse directories by observing the error messages, leading to potential exposure of sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/f42cf72a-8015-44a6-81a9-c6332ef05afc
CVE ID: CVE-2024-7039 State: PUBLISHED Published: 2025-03-20T10:11:02.270Z Last Updated: 2025-10-15T12:49:48.565Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-863 Description: In open-webui/open-webui version v0.3.8, there is an improper privilege management vulnerability. The application allows an attacker, acting as an admin, to delete other administrators via the API endpoint `http://0.0.0.0:8080/api/v1/users/{uuid_administrator}`. This action is restricted by the user interface but can be performed through direct API calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
ace but can be performed through direct API calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/27fc8a5a-546e-4cf2-8edb-df42e36518fc
CVE ID: CVE-2024-7040 State: PUBLISHED Published: 2025-03-20T10:09:45.114Z Last Updated: 2025-10-15T12:49:48.904Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-639 Description: In version v0.3.8 of open-webui/open-webui, there is an improper access control vulnerability. On the frontend admin page, administrators are intended to view only the chats of non-admin members. However, by modifying the user_id parameter, it is possible to view the chats of any administrator, including those of other admin (owner) accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.c
those of other admin (owner) accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/bd182309-4aa4-4747-941e-bbc1741955c1
CVE ID: CVE-2024-7041 State: PUBLISHED Published: 2024-10-09T19:57:41.184Z Last Updated: 2025-10-15T12:50:35.629Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-639 Description: An Insecure Direct Object Reference (IDOR) vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint `http://0.0.0.0:3000/api/v1/memories/{id}/update`, where the decentralization design is flawed, allowing attackers to edit other users' memories without proper authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/6855227f
oper authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/6855227f-1237-47b8-8d37-29aad7ddec3a
CVE ID: CVE-2024-7042 State: PUBLISHED Published: 2024-10-29T12:50:05.375Z Last Updated: 2025-10-15T12:50:36.199Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: langchain-ai Products: langchain-ai/langchainjs Problem Types: CWE-89 Description: A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nod
, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/b612defb-1104-4fff-9fef-001ab07c7b2d - https://github.com/langchain-ai/langchainjs/commit/615b9d9ab30a2d23a2f95fb8d7acfdf4b41ad7a6
CVE ID: CVE-2024-7043 State: PUBLISHED Published: 2025-03-20T10:10:40.870Z Last Updated: 2025-10-15T12:50:36.685Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-862 Description: An improper access control vulnerability in open-webui/open-webui v0.3.8 allows attackers to view and delete any files. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the GET /api/v1/files/ interface to retrieve information on all files uploaded by users, which includes the ID values. The attacker can then use the GET /api/v1/files/{file_id} interface to obta
aded by users, which includes the ID values. The attacker can then use the GET /api/v1/files/{file_id} interface to obtain information on any file and the DELETE /api/v1/files/{file_id} interface to delete any file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/c01e0c7f-68d8-45cf-91d2-521c97f33b00
CVE ID: CVE-2024-7044 State: PUBLISHED Published: 2025-03-20T10:10:23.772Z Last Updated: 2025-03-20T18:22:11.578Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: open-webui Products: open-webui/open-webui Problem Types: CWE-79 Description: A Stored Cross-Site Scripting (XSS) vulnerability exists in the chat file upload functionality of open-webui/open-webui version 0.3.8. An attacker can inject malicious content into a file, which, when accessed by a victim through a URL or shared chat, executes JavaScript in the victim's browser. This can lead to user data theft, session hijacking, malware distribution, and phishing attacks. Additional Analyst Notes: - CISA
lead to user data theft, session hijacking, malware distribution, and phishing attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/c25a885c-d6e2-4169-9ee8-4d33bcbb5ef6