deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-10907
Published: 2025-03-20
Description: In lm-sys/fastchat Release v0.2.36, the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary. Each extra character is processed in an infinite loop, leading to excessive resource consumption and a complete denial of service (DoS) for all users. The vulnerability is unauthenticated, meaning no user login or interaction is required for an attacker to exploit this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://huntr.com/bounties/bf3ca81d-3508-4455-95d9-0b653e46d6e4
CVE: CVE-2024-10908
Published: 2025-03-20
Description: An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://huntr.com/bounties/61f5e725-5579-4d08-8a88-e4ba04e6d1f2
CVE: CVE-2024-10912
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://huntr.com/bounties/52f335b8-1134-4d0f-acb4-efef516de414
CVE: CVE-2024-10935
Published: 2025-03-20
Description: automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary, leading to excessive resource consumption and a complete denial of service (DoS) for all users. The vulnerability is unauthenticated, meaning no user login or interaction is required for an attacker to exploit this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/e6fdc6ed-f38d-4798-b60a-0e47893a81a6
CVE: CVE-2024-10940
Published: 2025-03-20
Description: A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchain_core.prompts.ImagePromptTemplate's (and by extension langchain_core.prompts.ChatPromptTemplate's) with input variables that can read any user-specified path from the server file system. If the outputs of these prompt templates are exposed to the user, either directly or through downstream model outputs, it can lead to the exposure of sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://github.com/langchain-ai/langchain/commit/c1e742347f9701aadba8920e4d1f79a636e50b68; https://huntr.com/bounties/be1ee1cb-2147-4ff4-a57b-b6045271cf27
CVE: CVE-2024-10948
Published: 2025-03-20
Description: A vulnerability in the upload function of binary-husky/gpt_academic allows any user to read arbitrary files on the system, including sensitive files such as `config.py`. This issue affects the latest version of the product. An attacker can exploit this vulnerability by intercepting the websocket request during file upload and replacing the file path with the path of the file they wish to read. The server then copies the file to the `private_upload` folder and provides the path to the copied file, which can be accessed via a GET request. This vulnerability can lead to the exposure of sensitive system files, potentially including credentials, configuration files, or sensitive user data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://huntr.com/bounties/290a379d-8441-4292-a553-3587e8c5c729; https://huntr.com/bounties/290a379d-8441-4292-a553-3587e8c5c729
CVE: CVE-2024-10950
Published: 2025-03-20
Description: In binary-husky/gpt_academic version <= 3.83, the plugin `CodeInterpreter` is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. This vulnerability can be exploited by an attacker to achieve remote code execution (RCE) on the application backend server, potentially gaining full control of the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://huntr.com/bounties/9abb1617-0c1d-42c7-a647-d9d2b39c6866
CVE: CVE-2024-10954
Published: 2025-03-20
Description: In the `manim` plugin of binary-husky/gpt_academic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The root cause is the execution of untrusted code generated by the LLM without a proper sandbox. This allows an attacker to perform remote code execution (RCE) on the app backend server by injecting malicious code through the prompt.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://huntr.com/bounties/72d034e3-6ca2-495d-98a7-ac9565588c09
CVE: CVE-2024-10955
Published: 2025-03-20
Description: A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern `r'<[^>]+>'` to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An attacker can exploit this by uploading a malicious JSON payload, causing the server to consume 100% CPU for an extended period. This can lead to a Denial of Service (DoS) condition, potentially affecting the entire server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333
References: https://huntr.com/bounties/8291f8d0-5060-47e7-9986-1f411310fb7b
CVE: CVE-2024-10956
Published: 2025-03-20
Description: GPT Academy version 3.83 in the binary-husky/gpt_academic repository is vulnerable to Cross-Site WebSocket Hijacking (CSWSH). This vulnerability allows an attacker to hijack an existing WebSocket connection between the victim's browser and the server, enabling unauthorized actions such as deleting conversation history without the victim's consent. The issue arises due to insufficient WebSocket authentication and lack of origin validation.
CVSS Score: 7.1 (HIGH)
CWE: CWE-346, CWE-346
References: https://huntr.com/bounties/0f8403ad-5f60-4eb9-9f51-8fbd2e41eda4
CVE: CVE-2024-10986
Published: 2025-03-20
Description: GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload function. This function can download and extract tar.gz files from arxiv.org. Despite implementing protections against path traversal, the application overlooks the Tarslip triggered by symlinks. This oversight allows attackers to read arbitrary local files from the victim server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59
References: https://huntr.com/bounties/db2167f5-f17f-491d-aeec-69ba55bf6427
CVE: CVE-2024-11030
Published: 2025-03-20
Description: GPT Academic version 3.83 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability through its HotReload plugin function, which calls the crazy_utils.get_files_from_everything() API without proper sanitization. This allows attackers to exploit the vulnerability to abuse the victim GPT Academic's Gradio Web server's credentials to access unauthorized web resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/729d9928-c28a-40fd-8a86-bb4ca2984bba; https://huntr.com/bounties/729d9928-c28a-40fd-8a86-bb4ca2984bba
CVE: CVE-2024-11031
Published: 2025-03-20
Description: In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the Markdown_Translate.get_files_from_everything() API. This vulnerability is exploited through the HotReload(Markdown翻译中) plugin function, which allows downloading arbitrary web hosts by only checking if the link starts with 'http'. Attackers can exploit this vulnerability to abuse the victim GPT Academic's Gradio Web server's credentials to access unauthorized web resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://huntr.com/bounties/d27d89a7-7d54-45b9-a9eb-66c00bc56e02
CVE: CVE-2024-11033
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability exists in the file upload feature of binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this vulnerability by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable for legitimate users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://huntr.com/bounties/78afc15c-7db7-42fe-90f5-a0480a2ec222
CVE: CVE-2024-11037
Published: 2025-03-20
Description: A path traversal vulnerability exists in binary-husky/gpt_academic at commit 679352d, which allows an attacker to bypass the blocked_paths protection and read the config.py file containing sensitive information such as the OpenAI API key. This vulnerability is exploitable on Windows operating systems by accessing a specific URL that includes the absolute path of the project.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://huntr.com/bounties/91243fc1-f287-4f4b-8aa6-dfe3efff23e5
CVE: CVE-2024-11039
Published: 2025-03-20
Description: A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gpt_academic versions up to and including 3.83. This vulnerability allows attackers to achieve remote command execution by deserializing untrusted data. The issue arises from the inclusion of numpy in the deserialization whitelist, which can be exploited by constructing a malicious compressed package containing a merge_result.pkl file and a merge_proofread_en.tex file. The vulnerability is fixed in commit 91f5e6b.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/binary-husky/gpt_academic/commit/91f5e6b8f754beb47b02f7c1893804c1c9543ccb; https://huntr.com/bounties/f233a365-522c-44f6-876f-db492fb58ad5
CVE: CVE-2024-11040
Published: 2025-03-20
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-8939. Notes: All CVE users should reference CVE-2024-8939 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-11041
Published: 2025-03-20
Description: vllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function. The function uses pickle.loads to parse received sockets directly, leading to a remote code execution vulnerability. An attacker can exploit this by sending a malicious payload to the MessageQueue, causing the victim's machine to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://huntr.com/bounties/00136195-11e0-4ad0-98d5-72db066e867f
CVE: CVE-2024-11042
Published: 2025-03-20
Description: In invoke-ai/invokeai version v5.0.2, the web API `POST /api/v1/images/delete` is vulnerable to Arbitrary File Deletion. This vulnerability allows unauthorized attackers to delete arbitrary files on the server, potentially including critical or sensitive system files such as SSH keys, SQLite databases, and configuration files. This can impact the integrity and availability of applications relying on these files.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-73
References: https://github.com/invoke-ai/invokeai/commit/5440c037674882b2ab7acd59087e9bb04b49657a; https://huntr.com/bounties/635535a7-c804-4789-ac3a-48d951263987
CVE: CVE-2024-11043
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability was discovered in the /api/v1/boards/{board_id} endpoint of invoke-ai/invokeai version v5.0.2. This vulnerability occurs when an excessively large payload is sent in the board_name field during a PATCH request. By sending a large payload, the UI becomes unresponsive, rendering it impossible for users to interact with or manage the affected board. Additionally, the option to delete the board becomes inaccessible, amplifying the severity of the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://huntr.com/bounties/9270900a-b8b7-402f-aee5-432d891e5648; https://huntr.com/bounties/9270900a-b8b7-402f-aee5-432d891e5648
CVE: CVE-2024-11044
Published: 2025-03-20
Description: An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This vulnerability can be exploited to conduct phishing attacks, distribute malware, and steal user credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://huntr.com/bounties/ee942e5e-4987-4f81-ba83-014fec6b33b3
CVE: CVE-2024-11045
Published: 2025-03-20
Description: A Cross-Site WebSocket Hijacking (CSWSH) vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows an attacker to clone a malicious server extension from a GitHub repository. The vulnerability arises from the lack of proper validation on WebSocket connections at ws://127.0.0.1:7860/queue/join, enabling unauthorized actions on the server. This can lead to unauthorized cloning of server extensions, execution of malicious scripts, data exfiltration, and potential denial of service (DoS).
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-284, CWE-346
References: https://huntr.com/bounties/b7ed0d87-0be5-4526-9b21-ffe0d39c283e
CVE: CVE-2024-11137
Published: 2025-03-20
Description: An Insecure Direct Object Reference (IDOR) vulnerability exists in the `PATCH /v1/runs/:id/score` endpoint of lunary-ai/lunary version 1.6.0. This vulnerability allows an attacker to update the score data of any run by manipulating the id parameter in the request URL, which corresponds to the `runId_score` in the database. The endpoint does not sufficiently validate whether the authenticated user has permission to modify the specified runId, enabling an attacker with a valid account to modify other users' runId scores by specifying different id values. This issue was fixed in version 1.6.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://github.com/lunary-ai/lunary/commit/ded72a95c220904a151d27daf3c67e8644e386c6; https://huntr.com/bounties/0a399d86-0105-4f48-a77b-9fa7d7054be8
CVE: CVE-2024-11167
Published: 2025-03-20
Description: An improper access control vulnerability in danny-avila/librechat versions prior to 0.7.6 allows authenticated users to delete other users' prompts via the groupid parameter. This issue occurs because the endpoint does not verify whether the provided prompt ID belongs to the current user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://github.com/danny-avila/librechat/commit/5071bdbf9ac621165f0e8d009818851f3951eee7; https://huntr.com/bounties/298f5760-5797-4432-8b9e-544609d612c0
CVE: CVE-2024-11169
Published: 2025-03-20
Description: An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted request, causing the server to crash. The vulnerability is fixed in version 0.7.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-115
References: https://github.com/danny-avila/librechat/commit/629be5c0ca2b332178524b4e3f6fac715aea8cc4; https://huntr.com/bounties/754e1649-5612-4ba9-a533-06b46de5c4b5
CVE: CVE-2024-11170
Published: 2025-03-20
Description: A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware. This can lead to arbitrary file write and potentially remote code execution. The issue is fixed in version 0.7.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-29
References: https://github.com/danny-avila/librechat/commit/629be5c0ca2b332178524b4e3f6fac715aea8cc4; https://huntr.com/bounties/b64156c2-5380-4d4d-af30-b2938dcdd46e
CVE: CVE-2024-11171
Published: 2025-03-20
Description: In danny-avila/librechat version git 0c2a583, there is an improper input validation vulnerability. The application uses multer middleware for handling multipart file uploads. When using in-memory storage (the default setting for multer), there is no limit on the upload file size. This can lead to a server crash due to out-of-memory errors when handling large files. An attacker without any privileges can exploit this vulnerability to cause a complete denial of service. The issue is fixed in version 0.7.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/danny-avila/librechat/commit/bb58a2d0662ef86dc75a9d2f6560125c018e3836; https://huntr.com/bounties/91717a5a-d653-4e35-b186-9e8d00aa4285
CVE: CVE-2024-11172
Published: 2025-03-20
Description: A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware `checkBan` is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This issue is fixed in version 0.7.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://github.com/danny-avila/librechat/commit/976784c01fa4cce00d4c2941801d56aed375c21b; https://huntr.com/bounties/c76a7ee3-2e26-45a0-8940-21c749592105
CVE: CVE-2024-11173
Published: 2025-03-20
Description: An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, leading to a full denial of service. This issue occurs when certain API endpoints receive malformed input, resulting in an uncaught exception. Although a valid JWT is required to exploit this vulnerability, LibreChat allows open registration, enabling unauthenticated attackers to create an account and perform the attack. The issue is fixed in version 0.7.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-248
References: https://github.com/danny-avila/librechat/commit/95a212534f1c5991bd1231a34ac3668b4b592cc3; https://huntr.com/bounties/4cebf926-c17f-4836-868b-e1de86221cec
CVE: CVE-2024-11300
Published: 2025-03-20
Description: In lunary-ai/lunary before version 1.6.3, an improper access control vulnerability exists where a user can access prompt data of another user. This issue affects version 1.6.2 and the main branch. The vulnerability allows unauthorized users to view sensitive prompt data by accessing specific URLs, leading to potential exposure of critical information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://github.com/lunary-ai/lunary/commit/79dc370596d979b756f6ea0250d97a2d02385ecd; https://huntr.com/bounties/8dca7994-0d92-491e-a419-02adfe23ffa4; https://huntr.com/bounties/8dca7994-0d92-491e-a419-02adfe23ffa4
CVE: CVE-2024-11301
Published: 2025-03-20
Description: In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This allows an attacker to overwrite existing data by submitting a POST request with the same slug as an existing evaluator. The lack of database constraints or application-layer validation to prevent duplicates exposes the application to data integrity issues. This vulnerability can result in corrupted data and potentially malicious actions, impairing the system's functionality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-837
References: https://github.com/lunary-ai/lunary/commit/79dc370596d979b756f6ea0250d97a2d02385ecd; https://huntr.com/bounties/3d99aca5-b135-4833-b48b-7806bc4bf861
CVE: CVE-2024-11302
Published: 2025-03-20
Description: A missing check_access() function in the lollms_binding_infos module of the parisneo/lollms repository, version V14, allows attackers to add, modify, and remove bindings arbitrarily. This vulnerability affects the /install_binding and /reinstall_binding endpoints, among others, enabling unauthorized access and manipulation of binding settings without requiring the client_id value.
CVSS Score: 8.0 (HIGH)
CWE: CWE-304
References: https://huntr.com/bounties/e341304b-4651-4de9-b7b9-b89aead3b46e
CVE: CVE-2024-11441
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in Serge version 0.9.0. The vulnerability is due to improper neutralization of input during web page generation in the chat prompt. An attacker can exploit this vulnerability by sending a crafted message containing malicious HTML/JavaScript code, which will be stored and executed whenever the chat is accessed, leading to unintended content being shown to the user and potential phishing attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/ae76d1ea-21a4-456d-bef2-331aef3ea376
CVE: CVE-2024-11449
Published: 2025-03-20
Description: A vulnerability in haotian-liu/llava version 1.2.0 (LLaVA-1.6) allows for Server-Side Request Forgery (SSRF) through the /run/predict endpoint. An attacker can gain unauthorized access to internal networks or the AWS metadata endpoint by sending crafted requests that exploit insufficient validation of the path parameter. This flaw can lead to unauthorized network access, sensitive data exposure, and further exploitation within the network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/e96aba28-d564-4ecb-ab77-350511d2e1ee
CVE: CVE-2024-11602
Published: 2025-03-20
Description: A Cross-Origin Resource Sharing (CORS) vulnerability exists in feast-dev/feast version 0.40.0. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can bypass intended security controls and potentially expose sensitive information.
CVSS Score: 7.4 (HIGH)
CWE: CWE-346
References: https://huntr.com/bounties/7b24ecbe-0af7-4125-ab56-bce09786042e
CVE: CVE-2024-11603
Published: 2025-03-20
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the `/queue/join?` endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal networks or the AWS metadata endpoint, potentially exposing sensitive data and compromising internal servers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/89f1158d-4a75-4000-a1bd-f82dd1a62bff
CVE: CVE-2024-11821
Published: 2025-03-20
Description: A privilege escalation vulnerability exists in langgenius/dify version 0.9.1. This vulnerability allows a normal user to modify Orchestrate instructions for a chatbot created by an admin user. The issue arises because the application does not properly enforce access controls on the endpoint /console/api/apps/{chatbot-id}/model-config, allowing unauthorized users to alter chatbot configurations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-250
References: https://huntr.com/bounties/76d5986d-3882-4ea7-81cb-f00400e5c6b6
CVE: CVE-2024-11822
Published: 2025-03-20
Description: langgenius/dify version 0.9.1 contains a Server-Side Request Forgery (SSRF) vulnerability. The vulnerability exists due to improper handling of the api_endpoint parameter, allowing an attacker to make direct requests to internal network services. This can lead to unauthorized access to internal servers and potentially expose sensitive information, including access to the AWS metadata endpoint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/f3042029-5d4e-41c6-850d-bbe02fae6592; https://huntr.com/bounties/f3042029-5d4e-41c6-850d-bbe02fae6592