deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-7034
Published: 2025-03-20
Description: In open-webui version 0.3.8, the endpoint `/models/upload` is vulnerable to arbitrary file write due to improper handling of user-supplied filenames. The vulnerability arises from the usage of `file_path = f"{UPLOAD_DIR}/{file.filename}"` without proper input validation or sanitization. An attacker can exploit this by manipulating the `file.filename` parameter to include directory traversal sequences, causing the resulting `file_path` to escape the intended `UPLOAD_DIR` and potentially overwrite arbitrary files on the system. This can lead to unauthorized modifications of system binaries, configuration files, or sensitive data, potentially enabling remote command execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/711beada-10fe-4567-9278-80a689da8613
CVE: CVE-2024-7035
Published: 2025-03-20
Description: In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-352
References: https://huntr.com/bounties/2ac81740-410b-467a-9244-75d82a6f9e11
CVE: CVE-2024-7036
Published: 2025-03-20
Description: A vulnerability in open-webui/open-webui v0.3.8 allows an unauthenticated attacker to sign up with excessively large text in the 'name' field, causing the Admin panel to become unresponsive. This prevents administrators from performing essential user management actions such as deleting, editing, or adding users. The vulnerability can also be exploited by authenticated users with low privileges, leading to the same unresponsive state in the Admin panel.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://huntr.com/bounties/ba62d093-ab27-48fa-9c53-0602c8cdc48a
CVE: CVE-2024-7039
Published: 2025-03-20
Description: In open-webui/open-webui version v0.3.8, there is an improper privilege management vulnerability. The application allows an attacker, acting as an admin, to delete other administrators via the API endpoint `http://0.0.0.0:8080/api/v1/users/{uuid_administrator}`. This action is restricted by the user interface but can be performed through direct API calls.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-863
References: https://huntr.com/bounties/27fc8a5a-546e-4cf2-8edb-df42e36518fc
CVE: CVE-2024-7040
Published: 2025-03-20
Description: In version v0.3.8 of open-webui/open-webui, there is an improper access control vulnerability. On the frontend admin page, administrators are intended to view only the chats of non-admin members. However, by modifying the user_id parameter, it is possible to view the chats of any administrator, including those of other admin (owner) accounts.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-639
References: https://huntr.com/bounties/bd182309-4aa4-4747-941e-bbc1741955c1
CVE: CVE-2024-7043
Published: 2025-03-20
Description: An improper access control vulnerability in open-webui/open-webui v0.3.8 allows attackers to view and delete any files. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the GET /api/v1/files/ interface to retrieve information on all files uploaded by users, which includes the ID values. The attacker can then use the GET /api/v1/files/{file_id} interface to obtain information on any file and the DELETE /api/v1/files/{file_id} interface to delete any file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://huntr.com/bounties/c01e0c7f-68d8-45cf-91d2-521c97f33b00
CVE: CVE-2024-7044
Published: 2025-03-20
Description: A Stored Cross-Site Scripting (XSS) vulnerability exists in the chat file upload functionality of open-webui/open-webui version 0.3.8. An attacker can inject malicious content into a file, which, when accessed by a victim through a URL or shared chat, executes JavaScript in the victim's browser. This can lead to user data theft, session hijacking, malware distribution, and phishing attacks.
CVSS Score: 8.9 (HIGH)
CWE: CWE-79
References: https://huntr.com/bounties/c25a885c-d6e2-4169-9ee8-4d33bcbb5ef6
CVE: CVE-2024-7045
Published: 2025-03-20
Description: In version v0.3.8 of open-webui/open-webui, improper access control vulnerabilities allow an attacker to view any prompts. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/prompts/ interface to retrieve all prompt information created by the admin, which includes the ID values. Subsequently, the attacker can exploit the /api/v1/prompts/command/{command_id} interface to obtain arbitrary prompt information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://huntr.com/bounties/03ea0826-af7b-4717-b63e-90fd19675ab2
CVE: CVE-2024-7046
Published: 2025-03-20
Description: An improper access control vulnerability in open-webui/open-webui v0.3.8 allows an attacker to view admin details. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/auths/admin/details interface to retrieve the first admin (owner) details.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://huntr.com/bounties/684185e4-6766-4638-b08a-0de9c2820aee
CVE: CVE-2024-7053
Published: 2025-03-20
Description: A vulnerability in open-webui/open-webui version 0.3.8 allows an attacker with a user-level account to perform a session fixation attack. The session cookie for all users is set with the default `SameSite=Lax` and does not have the `Secure` flag enabled, allowing the session cookie to be sent over HTTP to a cross-origin domain. An attacker can exploit this by embedding a malicious markdown image in a chat, which, when viewed by an administrator, sends the admin's session cookie to the attacker's server. This can lead to a stealthy administrator account takeover, potentially resulting in remote code execution (RCE) due to the elevated privileges of administrator accounts.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://huntr.com/bounties/947f8191-0abf-4adf-b7c4-d4c19683aba2; https://huntr.com/bounties/947f8191-0abf-4adf-b7c4-d4c19683aba2
CVE: CVE-2024-7058
Published: 2025-03-20
Description: A vulnerability in the sanitize_path function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personality_folder on the victim's computer.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-23
References: https://huntr.com/bounties/148fce03-0f5a-4939-b636-b7f9848765e4
CVE: CVE-2024-7476
Published: 2025-03-20
Description: A broken access control vulnerability exists in lunary-ai/lunary versions 1.2.7 through 1.4.2. The vulnerability allows an authenticated attacker to modify any user's templates by sending a crafted HTTP POST request to the /v1/templates/{id}/versions endpoint. This issue is resolved in version 1.4.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/lunary-ai/lunary/commit/8f563c77d8614a72980113f530c7a9ec15a5f8d5; https://huntr.com/bounties/183761f7-d411-4332-af86-2ccfbcc5bd9f
CVE: CVE-2024-7760
Published: 2025-03-20
Description: aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can be chained with other existing vulnerabilities such as remote code execution, denial of service, and arbitrary file read/write.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352
References: https://huntr.com/bounties/2038df5f-4829-4040-8573-67bf9bb89229
CVE: CVE-2024-7764
Published: 2025-03-20
Description: Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests. The vulnerability occurs when the `generate_sql` function calls `extract_sql` with the LLM response. An attacker can include a semi-colon between a search data field and their own command, causing the `extract_sql` function to remove all LLM generated SQL and execute the attacker's command if it passes the `is_sql_valid` function. This allows the execution of user-defined SQL beyond the expected boundaries, notably the trained schema.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://huntr.com/bounties/85d403b1-fbed-42e9-9ec1-2f79abf6eb0f
CVE: CVE-2024-7765
Published: 2025-03-20
Description: In h2oai/h2o-3 version 3.46.0.2, a vulnerability exists where uploading and repeatedly parsing a large GZIP file can cause a denial of service. The server becomes unresponsive due to memory exhaustion and a large number of concurrent slow-running jobs. This issue arises from the improper handling of highly compressed data, leading to significant data amplification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-409
References: https://huntr.com/bounties/0e58b1a5-bdca-4e60-af92-09de9c76a9ff; https://huntr.com/bounties/0e58b1a5-bdca-4e60-af92-09de9c76a9ff
CVE: CVE-2024-7767
Published: 2025-03-20
Description: An improper access control vulnerability exists in danswer-ai/danswer version v0.3.94. This vulnerability allows the first user created in the system to view, modify, and delete chats created by an Admin. This can lead to unauthorized access to sensitive information, loss of data integrity, and potential compliance violations.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://huntr.com/bounties/1425dada-72d8-4bd9-a3e7-2863bb3e1a6c; https://huntr.com/bounties/1425dada-72d8-4bd9-a3e7-2863bb3e1a6c
CVE: CVE-2024-7768
Published: 2025-03-20
Description: A vulnerability in the `/3/ImportFiles` endpoint of h2oai/h2o-3 version 3.46.1 allows an attacker to cause a denial of service. The endpoint takes a single GET parameter, `path`, which can be recursively set to reference itself. This leads the server to repeatedly call its own endpoint, eventually filling up the request queue and leaving the server unable to handle other requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/3fe640df-bef4-4072-8890-0d12bc2818f6
CVE: CVE-2024-7771
Published: 2025-03-20
Description: A vulnerability in the Dockerized version of mintplex-labs/anything-llm (latest, digest 1d9452da2b92) allows for a denial of service. Uploading an audio file with a very low sample rate causes the functionality responsible for transcribing it to crash the entire site instance. The issue arises from the localWhisper implementation, where resampling the audio file from 1 Hz to 16000 Hz quickly exceeds available memory, leading to the Docker instance being killed by the instance manager.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/mintplex-labs/anything-llm/commit/dd017c6cbbf42abdef7861a66558c53b66424d07; https://huntr.com/bounties/a31a9834-e9c4-4b50-a1ec-ecb69f2a6142
CVE: CVE-2024-7773
Published: 2025-03-20
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-45436. Notes: All CVE users should reference CVE-2024-45436 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-7776
Published: 2025-03-20
Description: A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63; https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63
CVE: CVE-2024-7779
Published: 2025-03-20
Description: A vulnerability in danswer-ai/danswer version 1 allows an attacker to perform a Regular Expression Denial of Service (ReDoS) by manipulating regular expressions. This can significantly slow down the application's response time and potentially render it completely unusable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://huntr.com/bounties/829f7d9f-8755-4362-bd40-801e4690dcdc
CVE: CVE-2024-7804
Published: 2025-03-20
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-7806
Published: 2025-03-20
Description: A vulnerability in open-webui/open-webui versions <= 0.3.8 allows remote code execution by non-admin users via Cross-Site Request Forgery (CSRF). The application uses cookies with the SameSite attribute set to lax for authentication and lacks CSRF tokens. This allows an attacker to craft a malicious HTML that, when accessed by a victim, can modify the Python code of an existing pipeline and execute arbitrary code with the victim's privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://huntr.com/bounties/9350a68d-5f33-4b3d-988b-81e778160ab8; https://huntr.com/bounties/9350a68d-5f33-4b3d-988b-81e778160ab8
CVE: CVE-2024-7819
Published: 2025-03-20
Description: A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive information such as chat contents, API keys, and other data. This vulnerability occurs due to improper validation of the origin header, enabling malicious web pages to make unauthorized requests to the application's API.
CVSS Score: 7.4 (HIGH)
CWE: CWE-346
References: https://huntr.com/bounties/06a21857-e13f-4cf4-aa67-de11419a98c0
CVE: CVE-2024-7957
Published: 2025-03-20
Description: An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerability arises from the load_credentials method, where user-controlled input for realm_name and zuliprc_content is used to construct file paths and write file contents. This allows attackers to overwrite or create arbitrary files if a zuliprc- directory already exists in the temporary directory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-29
References: https://huntr.com/bounties/21e9b909-036c-4544-ad35-6a[PII_REDACTED]
CVE: CVE-2024-7959
Published: 2025-03-20
Description: The `/openai/models` endpoint in open-webui/open-webui version 0.3.8 is vulnerable to Server-Side Request Forgery (SSRF). An attacker can change the OpenAI URL to any URL without checks, causing the endpoint to send a request to the specified URL and return the output. This vulnerability allows the attacker to access internal services and potentially gain command execution by accessing instance secrets.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/3c8bea0a-d678-4d67-bb9c-2b5b610a2193
CVE: CVE-2024-7983
Published: 2025-03-20
Description: In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A maliciously crafted markdown payload can cause the server to spend excessive time converting it, leading to a denial of service. The server becomes unresponsive to other requests until the conversion is complete.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/f8156ca5-1328-480f-a72b-8d3dfdad87dc
CVE: CVE-2024-7990
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in open-webui/open-webui version 0.3.8. The vulnerability is present in the `/api/v1/models/add` endpoint, where the model description field is improperly sanitized before being rendered in chat. This allows an attacker to inject malicious scripts that can be executed by any user, including administrators, potentially leading to arbitrary code execution.
CVSS Score: 8.4 (HIGH)
CWE: CWE-79
References: https://huntr.com/bounties/2256e336-0f67-449e-a82d-7fc57081a21c
CVE: CVE-2024-7999
Published: 2025-03-20
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-53981. Notes: All CVE users should reference CVE-2024-53981 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-8017
Published: 2025-03-20
Description: An XSS vulnerability exists in open-webui/open-webui versions <= 0.3.8, specifically in the function that constructs the HTML for tooltips. This vulnerability allows attackers to perform operations with the victim's privileges, such as stealing chat history, deleting chats, and escalating their own account to an admin if the victim is an admin.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://huntr.com/bounties/ef06c7c8-1cb2-42a7-a6e6-17b2e1c744f7
CVE: CVE-2024-8018
Published: 2025-03-20
Description: A vulnerability in imartinez/privategpt version 0.5.0 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process these characters, rendering privateGPT inaccessible. This uncontrolled resource consumption can lead to prolonged unavailability of the service, disrupting operations and causing potential data inaccessibility and loss of productivity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/0661fa3b-bea4-4156-abed-a65d51958505
CVE: CVE-2024-8019
Published: 2025-03-20
Description: In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a Windows host. The vulnerability occurs at the `/api/v1/upload_file/` endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to potential remote code execution (RCE) by overwriting critical files or placing malicious files in sensitive locations.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://github.com/lightning-ai/pytorch-lightning/commit/330af381de88cff17515418a341cbc1f9f127f9a; https://huntr.com/bounties/2754298b-5af5-48ef-8b38-999093ddf2bd
CVE: CVE-2024-8020
Published: 2025-03-20
Description: A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://huntr.com/bounties/8b642a78-2b80-4fb0-9b2f-8ba0ff37db6a
CVE: CVE-2024-8021
Published: 2025-03-20
Description: An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an attacker-controlled site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://huntr.com/bounties/adc23067-ec04-47ef-9265-afd452071888; https://huntr.com/bounties/adc23067-ec04-47ef-9265-afd452071888
CVE: CVE-2024-8024
Published: 2025-03-20
Description: A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy, potentially leading to sensitive information exposure. Properly implementing a restrictive CORS policy is crucial to prevent such security issues.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346
References: https://huntr.com/bounties/bda53fab-88aa-4e03-8d9d-4cf50a98ffc7
CVE: CVE-2024-8026
Published: 2025-03-20
Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the backend API of netease-youdao/qanything, as of commit d9ab8bc. The backend server has overly permissive CORS headers, allowing all cross-origin calls. This vulnerability affects all backend endpoints, enabling actions such as creating, uploading, listing, deleting files, and managing knowledge bases.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://huntr.com/bounties/e57f1e32-0fe5-4997-926c-587461aa6274; https://huntr.com/bounties/e57f1e32-0fe5-4997-926c-587461aa6274
CVE: CVE-2024-8027
Published: 2025-03-20
Description: A stored Cross-Site Scripting (XSS) vulnerability exists in netease-youdao/QAnything. Attackers can upload malicious knowledge files to the knowledge base, which can trigger XSS attacks during user chats. This vulnerability affects all versions prior to the fix.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/cf75f024-3d64-416d-adfe-c4255d7c3f34
CVE: CVE-2024-8028
Published: 2025-03-20
Description: A vulnerability in danswer-ai/danswer v0.3.94 allows an attacker to cause a Denial of Service (DoS) by uploading a file with a malformed multipart boundary. By appending a large number of characters to the end of the multipart boundary, the server continuously processes each character, rendering the application inaccessible. This issue can be exploited by sending a single crafted request, affecting all users on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/55530ecb-0ac2-4dc1-9527-bf24de594a57
CVE: CVE-2024-8029
Published: 2025-03-20
Description: An XSS vulnerability was discovered in the upload file(s) process of imartinez/privategpt v0.5.0. Attackers can upload malicious SVG files, which execute JavaScript when victims click on the file link. This can lead to user data theft, session hijacking, malware distribution, and phishing attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/5941dc63-a4db-4b04-8007-bcaa828106d0
CVE: CVE-2024-8053
Published: 2025-03-20
Description: In version v0.3.10 of open-webui/open-webui, the `api/v1/utils/pdf` endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This vulnerability can be exploited by sending a POST request with an excessively large payload, potentially leading to server resource exhaustion and denial of service (DoS). Additionally, unauthorized users can misuse the endpoint to generate PDFs without verification, resulting in service misuse and potential operational and financial impacts.
CVSS Score: 8.2 (HIGH)
CWE: CWE-306, CWE-306
References: https://huntr.com/bounties/ebe8c1fa-113b-4df9-be03-a406b9adb9f4; https://huntr.com/bounties/ebe8c1fa-113b-4df9-be03-a406b9adb9f4
CVE: CVE-2024-8055
Published: 2025-03-20
Description: Vanna v0.6.3 is vulnerable to SQL injection via Snowflake database in its file staging operations using the `PUT` and `COPY` commands. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, such as `/etc/passwd`, by exploiting the exposed SQL queries through a Python Flask API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://huntr.com/bounties/7c92a611-6756-4885-8969-01d8b85b6c63
CVE: CVE-2024-8057
Published: 2025-03-20
Description: In version 0.4.1 of danswer-ai/danswer, a vulnerability exists where a basic user can create credentials and link them to an existing connector. This issue arises because the system allows an unauthenticated attacker to sign up with a basic account and perform actions that should be restricted to admin users. This can lead to excessive resource consumption, potentially resulting in a Denial of Service (DoS) and other significant issues, impacting the system's stability and security.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-306
References: https://huntr.com/bounties/b5991b98-a721-4acd-8ef2-980e15682913