deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-12777
Published: 2025-03-20
Description: A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service through the misuse of the sshfs-client. The tracking server, which is single-threaded, can be made unresponsive by requesting it to connect to an unresponsive socket via sshfs. The lack of an additional timeout setting in the sshfs-client causes the server to hang for a significant amount of time, preventing it from responding to other requests.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1088
References: https://huntr.com/bounties/cdf8db79-c290-4fe5-9383-4c518bfba4a8; https://huntr.com/bounties/cdf8db79-c290-4fe5-9383-4c518bfba4a8
CVE: CVE-2024-12778
Published: 2025-03-20
Description: A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service (DoS) attack. The issue arises when a large number of tracked metrics are retrieved simultaneously from the Aim web API, causing the web server to become unresponsive. The root cause is the lack of a limit on the number of metrics that can be requested per call, combined with the server's single-threaded nature, leading to excessive resource consumption and blocking of the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/892a9eee-0251-4e57-94a4-dad2e7f32715
CVE: CVE-2024-12779
Published: 2025-03-20
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in infiniflow/ragflow version 0.12.0. The vulnerability is present in the `POST /v1/llm/add_llm` and `POST /v1/conversation/tts` endpoints. Attackers can specify an arbitrary URL as the `api_base` when adding an `OPENAITTS` model, and subsequently access the `tts` REST API endpoint to read contents from the specified URL. This can lead to unauthorized access to internal web resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/3cc748ba-2afb-4bfe-8553-10eb6d6dd4f0; https://huntr.com/bounties/3cc748ba-2afb-4bfe-8553-10eb6d6dd4f0
CVE: CVE-2024-12864
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability was discovered in the file upload feature of netease-youdao/qanything version v2.0.0. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this vulnerability by sending a large filename, causing the server to become overwhelmed and unavailable for legitimate users. This attack does not require authentication, making it highly scalable and increasing the risk of exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://huntr.com/bounties/365c3b9a-180c-4bb5-98d8-dbd78d93fcb7
CVE: CVE-2024-12866
Published: 2025-03-20
Description: A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0. This vulnerability allows an attacker to read arbitrary files on the file system, which can lead to remote code execution by retrieving private SSH keys, reading private files, source code, and configuration files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/c23da7c7-a226-40a2-83db-6a8ab1b2ef64
CVE: CVE-2024-12868
Published: 2025-03-20
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-47874. Notes: All CVE users should reference CVE-2024-47874 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-12869
Published: 2025-03-20
Description: In infiniflow/ragflow version v0.12.0, there is an improper authentication vulnerability that allows a user to view another user's invite list. This can lead to a privacy breach where users' personal or private information, such as email addresses or usernames in the invite list, could be exposed without their consent. This data leakage can facilitate further attacks, such as phishing or spam, and result in loss of trust and potential regulatory issues.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-306
References: https://huntr.com/bounties/768b1a56-1e79-416a-8[PII_REDACTED]8b04a; https://huntr.com/bounties/768b1a56-1e79-416a-8[PII_REDACTED]8b04a
CVE: CVE-2024-12870
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in infiniflow/ragflow, affecting the latest commit on the main branch (cec2080). The vulnerability allows an attacker to upload HTML/XML files that can host arbitrary JavaScript payloads. These files are served with the 'application/xml' content type, which is automatically rendered by browsers. This can lead to the execution of arbitrary JavaScript in the context of the user's browser, potentially allowing attackers to steal cookies and gain unauthorized access to user files and resources. The vulnerability does not require authentication, making it accessible to anyone with network access to the instance.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/d6b497d2-5c95-4abc-8033-04b8068fed65
CVE: CVE-2024-12871
Published: 2025-03-20
Description: An XSS vulnerability in infiniflow/ragflow version 0.12.0 allows an attacker to upload a malicious PDF file to the knowledge base. When the file is viewed within Ragflow, the payload is executed in the context of the user's browser. This can lead to session hijacking, data exfiltration, or unauthorized actions performed on behalf of the victim, compromising sensitive user data and affecting the integrity of the entire application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/7903945c-2839-4dd5-9d40-9ef47fe53118; https://huntr.com/bounties/7903945c-2839-4dd5-9d40-9ef47fe53118
CVE: CVE-2024-12880
Published: 2025-03-20
Description: A vulnerability in infiniflow/ragflow version RAGFlow-0.13.0 allows for partial account takeover via insecure data querying. The issue arises from the way tenant IDs are handled in the application. If a user has access to multiple tenants, they can manipulate their tenant access to query and access API tokens of other tenants. This vulnerability affects the following endpoints: /v1/system/token_list, /v1/system/new_token, /v1/api/token_list, /v1/api/new_token, and /v1/api/rm. An attacker can exploit this to access other tenants' API tokens, perform actions on behalf of other tenants, and access their data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://huntr.com/bounties/c41c7eaa-554a-408c-96be-9dba56113970
CVE: CVE-2024-12882
Published: 2025-03-20
Description: comfyanonymous/comfyui version v0.2.4 suffers from a non-blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability can be exploited by combining the REST APIs `POST /internal/models/download` and `GET /view`, allowing attackers to abuse the victim server's credentials to access unauthorized web resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/e8768cb1-6a80-40c1-9cdf-bcd21f01f85a
CVE: CVE-2024-12886
Published: 2025-03-20
Description: An Out-Of-Memory (OOM) vulnerability exists in the `ollama` server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the `ollama` server crashing. The vulnerability is present in the `makeRequestWithRetry` and `getAuthorizationToken` functions, which use `io.ReadAll` to read the response body. This can result in excessive memory usage and a Denial of Service (DoS) condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-409
References: https://huntr.com/bounties/f115fe52-58af-4844-ad29-b1c25f7245df
CVE: CVE-2024-12909
Published: 2025-03-20
Description: A vulnerability in the FinanceChatLlamaPack of the run-llama/llama_index repository, versions up to v0.12.3, allows for SQL injection in the `run_sql_query` function of the `database_agent`. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code execution (RCE) through the use of PostgreSQL's large object functionality. The issue is fixed in version 0.3.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/run-llama/llama_index/commit/5d03c175476452db9b8abcdb7d5767dd7b310a75; https://huntr.com/bounties/44e8177f-200a-4ba3-a12c-8bc21e313a3f
CVE: CVE-2024-12910
Published: 2025-03-20
Description: A vulnerability in the `KnowledgeBaseWebReader` class of the run-llama/llama_index repository, version latest, allows an attacker to cause a Denial of Service (DoS) by controlling a URL variable to contain the root URL. This leads to infinite recursive calls to the `get_article_urls` method, exhausting system resources and potentially crashing the application.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-674
References: https://github.com/run-llama/llama_index/commit/159ce485a1168100bb219dc1b93133f1121579d9; https://huntr.com/bounties/27883f22-35ff-49df-aaa5-05031c7d6ad8; https://huntr.com/bounties/27883f22-35ff-49df-aaa5-05031c7d6ad8
CVE: CVE-2024-12911
Published: 2025-03-20
Description: A vulnerability in the `default_jsonalyzer` function of the `JSONalyzeQueryEngine` in the run-llama/llama_index repository allows for SQL injection via prompt injection. This can lead to arbitrary file creation and Denial-of-Service (DoS) attacks. The vulnerability affects the latest version and is fixed in version 0.5.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89
References: https://github.com/run-llama/llama_index/commit/bf282074e20e7dafd5e2066137dcd4cd17c3fb9e; https://huntr.com/bounties/095f9e67-311d-494c-99c5-5e61a0adb8f3
CVE: CVE-2024-13060
Published: 2025-03-20
Description: A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie. This issue is present in versions prior to 1.3.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/mintplex-labs/anything-llm/commit/696af19c45473172ad4d3ca749281800a4d1a45a; https://huntr.com/bounties/98a49c90-e095-441f-900c-59d463dc8e8f; https://huntr.com/bounties/98a49c90-e095-441f-900c-59d463dc8e8f
CVE: CVE-2024-2292
Published: 2025-03-20
Description: Due to a lack of access control, unauthorized users are able to view and modify information pertaining to other users.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862
References: https://huntr.com/bounties/90a7299e-9233-43fd-b666-7375c4fdbb3c
CVE: CVE-2024-4023
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading to the file being processed as an HTML file. This allows an attacker to execute arbitrary JavaScript code, which can be used to steal user cookies, perform HTTP requests, and access content of the same origin.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/flatpressblog/flatpress/commit/3c9cc69364a45fd3f92d4bd606344b5dd1205d6a; https://huntr.com/bounties/ed803c13-0858-4c22-93ba-bf2384ab1e9d
CVE: CVE-2024-4990
Published: 2025-03-20
Description: In yiisoft/yii2 version 2.0.48, the base Component class contains a vulnerability where the `__set()` magic method does not validate that the value passed is a valid Behavior class name or configuration. This allows an attacker to instantiate arbitrary classes, passing parameters to their constructors and invoking setter methods. Depending on the installed dependencies, various types of attacks are possible, including the execution of arbitrary code, retrieval of sensitive information, and unauthorized access.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-470
References: https://huntr.com/bounties/4fbdd965-02b6-42e4-b57b-f98f93415b8f; https://huntr.com/bounties/4fbdd965-02b6-42e4-b57b-f98f93415b8f
CVE: CVE-2024-5752
Published: 2025-03-20
Description: A path traversal vulnerability exists in stitionai/devika, specifically in the project creation functionality. In the affected version beacf6edaa205a5a[PII_REDACTED]a6db45137873b3, the project name is not validated, allowing an attacker to create a project with a crafted name that traverses directories. This can lead to arbitrary file overwrite when the application generates code and saves it to the specified project directory, potentially resulting in remote code execution.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/stitionai/devika/commit/6acce21fb08c3d1123ef05df6a33912bf0ee77c2; https://huntr.com/bounties/865b5f44-ef75-4243-a5f1-2f0d895353b1
CVE: CVE-2024-6483
Published: 2025-03-20
Description: A vulnerability in the `runs/delete-batch` endpoint of aimhubio/aim version 3.19.3 allows for arbitrary file or directory deletion through path traversal. The endpoint does not mitigate path traversal when handling user-specified run-names, which are used to specify log/metadata files for deletion. This can be exploited to delete arbitrary files or directories, potentially causing denial of service or data loss.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-23
References: https://huntr.com/bounties/dc45d480-e579-4af4-8603-c52ecfd5e363
CVE: CVE-2024-6577
Published: 2025-03-20
Description: In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthorized access to the bucket if it is not properly secured or claimed by the appropriate entity. The issue may result in data breaches, exposure of proprietary information, or unauthorized modifications to stored data.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-840
References: https://huntr.com/bounties/20[PII_REDACTED]-428f-bd1d-4fcd71fb2359
CVE: CVE-2024-6583
Published: 2025-03-20
Description: A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-23
References: https://huntr.com/bounties/c310b500-ec26-4121-8d3a-8e863181346f
CVE: CVE-2024-6825
Published: 2025-03-20
Description: BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution. The issue exists in the handling of the 'post_call_rules' configuration, where a callback function can be added. The provided value is split at the final '.' mark, with the last part considered the function name and the remaining part appended with the '.py' extension and imported. This allows an attacker to set a system method, such as 'os.system', as a callback, enabling the execution of arbitrary commands when a chat response is processed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/berriai/litellm/commit/441c7275ed2715f47650a7c2e525055c804073a9; https://huntr.com/bounties/1d98bebb-6cf4-46c9-87c3-d3b1972973b5
CVE: CVE-2024-6827
Published: 2025-03-20
Description: Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://huntr.com/bounties/1b4f8f38-39da-44b6-9f98-f618639d0dd7
CVE: CVE-2024-6829
Published: 2025-03-20
Description: A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to exploit the `tarfile.extractall()` function to extract the contents of a maliciously crafted tarfile to arbitrary locations on the host server. The attacker can control `repo.path` and `run_hash` to bypass directory existence checks and extract files to unintended locations, potentially overwriting critical files. This can lead to arbitrary data being written to arbitrary locations on the remote tracking server, which could be used for further attacks such as writing a new SSH key to the target server.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-73
References: https://huntr.com/bounties/7c97065c-1b63-4982-82c1-8038be0ed570
CVE: CVE-2024-6838
Published: 2025-03-20
Description: In mlflow/mlflow version v2.13.2, a vulnerability exists that allows the creation or renaming of an experiment with a large number of integers in its name due to the lack of a limit on the experiment name. This can cause the MLflow UI panel to become unresponsive, leading to a potential denial of service. Additionally, there is no character limit in the `artifact_location` parameter while creating the experiment.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://huntr.com/bounties/8ad52cb2-2cda-4eb0-aec9-586060ee43e0; https://huntr.com/bounties/8ad52cb2-2cda-4eb0-aec9-586060ee43e0
CVE: CVE-2024-6839
Published: 2025-03-20
Description: corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex pattern priority allows unauthorized cross-origin access to sensitive data or functionality, potentially exposing confidential information and increasing the risk of unauthorized actions by malicious actors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-41
References: https://huntr.com/bounties/403eb1fc-86f4-4820-8eba-0f3dfae9f2b4; https://lists.debian.org/debian-lts-announce/2025/05/msg00049.html
CVE: CVE-2024-6841
Published: 2025-03-20
Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the latest commit (56b782bcefd2e59b19cd7ba7878b95f54884f502) of the vanna-ai/vanna repository. Two endpoints in the built-in web app that provide SQL functionality are implemented as simple GET requests, making them susceptible to CSRF attacks. This vulnerability allows an attacker to run arbitrary SQL commands via CSRF without the target intending to expose the web app to the network or other users. The impact is limited to data alteration or deletion, as the attacker cannot read the results of the query.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://huntr.com/bounties/7c6cf388-6399-4e37-99f6-3f052eb1136e
CVE: CVE-2024-6842
Published: 2025-03-20
Description: In version 1.5.5 of mintplex-labs/anything-llm, the `/setup-complete` API endpoint allows unauthorized users to access sensitive system settings. The data returned by the `currentSettings` function includes sensitive information such as API keys for search engines, which can be exploited by attackers to steal these keys and cause loss of user assets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/mintplex-labs/anything-llm/commit/8b1ceb30c159cf3a10efa16275bc6849d84e4ea8; https://huntr.com/bounties/cd911fc7-ac6b-4974-acd0-9cc926fa8d9e
CVE: CVE-2024-6844
Published: 2025-03-20
Description: A vulnerability in corydolphin/flask-cors version 4.0.1 allows for inconsistent CORS matching due to the handling of the '+' character in URL paths. The request.path is passed through the unquote_plus function, which converts the '+' character to a space ' '. This behavior leads to incorrect path normalization, causing potential mismatches in CORS configuration. As a result, endpoints may not be matched correctly to their CORS settings, leading to unexpected CORS policy application. This can cause unauthorized cross-origin access or block valid requests, creating security vulnerabilities and usability issues.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-346
References: https://huntr.com/bounties/731a6cd4-d05f-4fe6-8f5b-fe088d7b34e0; https://lists.debian.org/debian-lts-announce/2025/05/msg00049.html
CVE: CVE-2024-6851
Published: 2025-03-20
Description: In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup function in the aim tracking server accepts a user-specified glob-pattern for deleting files. The function does not verify that the matched files are within the directory managed by LocalFileManager, allowing a maliciously crafted glob-pattern to lead to arbitrary file deletion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/839703fb-23b7-4dc4-ae81-44cd4740d3f3
CVE: CVE-2024-6854
Published: 2025-03-20
Description: In h2oai/h2o-3 version 3.46.0, the endpoint for exporting models does not restrict the export location, allowing an attacker to export a model to any file in the server's file structure, thereby overwriting it. This vulnerability can be exploited to overwrite any file on the target server with a trained model file, although the content of the overwrite is not controllable by the attacker.
CVSS Score: 7.1 (HIGH)
CWE: CWE-36
References: https://huntr.com/bounties/97d013f9-ac51-4c80-8dd7-8dfde11f33b2
CVE: CVE-2024-6863
Published: 2025-03-20
Description: In h2oai/h2o-3 version 3.46.0, an endpoint exposing a custom EncryptionTool allows an attacker to encrypt any files on the target server with a key of their choosing. The chosen key can also be overwritten, resulting in ransomware-like behavior. This vulnerability makes it possible for an attacker to encrypt arbitrary files with keys of their choice, making it exceedingly difficult for the target to recover the keys needed for decryption.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-749
References: https://huntr.com/bounties/10f55937-0cba-4530-897f-2abf30ed5270
CVE: CVE-2024-6866
Published: 2025-03-20
Description: corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the `try_match` function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching treats them as case-insensitive. This misconfiguration can lead to significant security vulnerabilities, allowing unauthorized origins to access paths meant to be restricted, resulting in data exposure and potential data leaks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-178
References: https://huntr.com/bounties/808c11af-faee-43a8-824b-b5ab4f62b9e6; https://lists.debian.org/debian-lts-announce/2025/05/msg00049.html
CVE: CVE-2024-6982
Published: 2025-03-20
Description: A remote code execution vulnerability exists in the Calculate function of parisneo/lollms version 9.8. The vulnerability arises from the use of Python's `eval()` function to evaluate mathematical expressions within a Python sandbox that disables `__builtins__` and only allows functions from the `math` module. This sandbox can be bypassed by loading the `os` module using the `_frozen_importlib.BuiltinImporter` class, allowing an attacker to execute arbitrary commands on the server. The issue is fixed in version 9.10.
CVSS Score: 8.4 (HIGH)
CWE: CWE-94
References: https://github.com/parisneo/lollms/commit/30e7eaba2ccfb751a81e7cb29fdef2ae8ffa6832; https://huntr.com/bounties/4f8e73ac-aaaf-4d5c-a6dd-58215b5a7fea
CVE: CVE-2024-6986
Published: 2025-03-20
Description: A Cross-site Scripting (XSS) vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the 'v-html' directive, which inserts the content of the 'full_template' variable directly as HTML. This allows an attacker to execute malicious JavaScript code by injecting a payload into the 'System Template' input field under main configurations.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/83e9bde1-40b2-49e9-be1c-bc1498eb8ebd
CVE: CVE-2024-7033
Published: 2025-03-20
Description: In version 0.3.8 of open-webui/open-webui, an arbitrary file write vulnerability exists in the download_model endpoint. When deployed on Windows, the application improperly handles file paths, allowing an attacker to manipulate the file path to write files to arbitrary locations on the server's filesystem. This can result in overwriting critical system or application files, causing denial of service, or potentially achieving remote code execution (RCE). RCE can allow an attacker to execute malicious code with the privileges of the user running the application, leading to a full system compromise.
CVSS Score: 7.2 (HIGH)
CWE: CWE-29
References: https://huntr.com/bounties/7078261f-8414-4bb7-9d72-a2a4d8bfd5d1