deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-11824
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in langgenius/dify version latest, specifically in the chat log functionality. The vulnerability arises because certain HTML tags like <input> and <form> are not disallowed, allowing an attacker to inject malicious HTML into the log via prompts. When an admin views the log containing the malicious HTML, the attacker could steal the admin's credentials or sensitive information. This issue is fixed in version 0.12.1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/langgenius/dify/commit/55edd5047e6fcbc9bb56a4ea055fcce090f3eb5d; https://huntr.com/bounties/72387deb-6e64-48ed-a8c3-b50d22a0970f
CVE: CVE-2024-11850
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in the latest version of langgenius/dify. The vulnerability is due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit this vulnerability by injecting malicious SVG content, which can execute arbitrary JavaScript code when viewed by an admin, potentially leading to credential theft.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/893da115-028d-4718-b586-a2b77897a470
CVE: CVE-2024-11958
Published: 2025-03-20
Description: A SQL injection vulnerability exists in the `duckdb_retriever` component of the run-llama/llama_index repository, specifically in the latest version. The vulnerability arises from the construction of SQL queries without using prepared statements, allowing an attacker to inject arbitrary SQL code. This can lead to remote code execution (RCE) by installing the shellfs extension and executing malicious commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/run-llama/llama_index/commit/35bd221e948e40458052d30c6ef2779bc965b6d0; https://huntr.com/bounties/8ddf66e1-f74c-4d53-992b-76bc45cacac1
CVE: CVE-2024-12029
Published: 2025-03-20
Description: A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can exploit this by embedding malicious code in model files, which is executed upon loading. This issue is fixed in version 5.4.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/invoke-ai/invokeai/commit/756008dc5899081c5aa51e5bd8f24c1b3975a59e; https://huntr.com/bounties/9b790f94-1b1b-4071-bc27-78445d1a87a3; https://huntr.com/bounties/9b790f94-1b1b-4071-bc27-78445d1a87a3
CVE: CVE-2024-12039
Published: 2025-03-20
Description: langgenius/dify version v0.10.1 contains a vulnerability where there are no limits applied to the number of code guess attempts for password reset. This allows an unauthenticated attacker to reset owner, admin, or other user passwords within a few hours by guessing the six-digit code, resulting in a complete compromise of the application.
CVSS Score: 8.1 (HIGH)
CWE: CWE-307
References: https://huntr.com/bounties/61af30d5-6055-4c6c-8a55-3fa43dada512
CVE: CVE-2024-12044
Published: 2025-03-20
Description: A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the `pickle.loads()` function in the `all_reduce_dict()` distributed training API without proper sanitization. This allows an attacker to execute arbitrary code by broadcasting a malicious payload to the distributed training network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://huntr.com/bounties/f7e4fc32-e167-49fb-9fc7-f092b9c27e8a
CVE: CVE-2024-12048
Published: 2025-03-20
Description: An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. The application fails to properly check authorization for multiple API endpoints, allowing attackers to view, edit, and delete other users' information without proper authorization. Affected endpoints include but are not limited to /get/project/{project_id}, /get/schedule_data/{agent_id}, /delete/{agent_id}, /get/organisation/{organisation_id}, and /get/user/{user_id}.
CVSS Score: 8.8 (HIGH)
CWE: CWE-304, CWE-639
References: https://huntr.com/bounties/6def3e3a-c443-44bb-b20e-3e69b48f37dc; https://huntr.com/bounties/6def3e3a-c443-44bb-b20e-3e69b48f37dc
CVE: CVE-2024-12055
Published: 2025-03-20
Description: A vulnerability in Ollama versions <=0.3.14 allows a malicious user to create a customized gguf model file that can be uploaded to the public Ollama server. When the server processes this malicious model, it crashes, leading to a Denial of Service (DoS) attack. The root cause of the issue is an out-of-bounds read in the gguf.go file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://huntr.com/bounties/7b111d55-8215-4727-8807-c5ed4cf1bfbe
CVE: CVE-2024-12063
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://huntr.com/bounties/7db0091f-cb53-4cde-aad7-7ce491dfd8d9
CVE: CVE-2024-12065
Published: 2025-03-20
Description: A local file inclusion vulnerability exists in haotian-liu/llava at commit c121f04. This vulnerability allows an attacker to access any file on the system by sending multiple crafted requests to the server. The issue is due to improper input validation in the gradio web UI component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/0594503c-038f-401c-9127-08be32bfd682
CVE: CVE-2024-12068
Published: 2025-03-20
Description: A Server-Side Request Forgery (SSRF) vulnerability was discovered in haotian-liu/llava, affecting version git c121f04. This vulnerability allows an attacker to make the server perform HTTP requests to arbitrary URLs, potentially accessing sensitive data that is only accessible from the server, such as AWS metadata credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/9d0b908d-63cd-4d62-91ff-6ceef3183752
CVE: CVE-2024-12070
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability exists in the file upload feature of haotian-liu/llava, specifically in Release v1.2.0 (LLaVA-1.6). The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users. This issue can be exploited without authentication, making it highly scalable and increasing the risk of exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://huntr.com/bounties/8adac028-21c5-41ba-b785-b03066c0b2a6; https://huntr.com/bounties/8adac028-21c5-41ba-b785-b03066c0b2a6
CVE: CVE-2024-12074
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability was discovered in the file upload feature of automatic1111/stable-diffusion-webui version 1.10.0. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users. This issue can be exploited without authentication, making it highly scalable and increasing the risk of exploitation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://huntr.com/bounties/6b44bfc2-31a7-4fe9-86fb-072c90a23642
CVE: CVE-2024-12215
Published: 2025-03-20
Description: In kedro-org/kedro version 0.19.8, the `pull_package()` API function allows users to download and extract micro packages from the Internet. However, the function `project_wheel_metadata()` within the code path can execute the `setup.py` file inside the tar file, leading to remote code execution (RCE) by running arbitrary commands on the victim's machine.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://huntr.com/bounties/fad27503-97a4-4933-91d4-96223b8c54d8
CVE: CVE-2024-12216
Published: 2025-03-20
Description: A vulnerability in the `ImageClassificationDataset.from_csv()` API of the `dmlc/gluon-cv` repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts `tar.gz` files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can exploit this by crafting malicious tar files that, when extracted, can overwrite files on the victim's system via path traversal or faked symlinks.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://huntr.com/bounties/46081fdc-2951-4deb-a2c9-2627007bdce0
CVE: CVE-2024-12217
Published: 2025-03-20
Description: A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blocked_path functionality, which is intended to disallow users from reading certain files, is flawed. Specifically, while the application correctly blocks access to paths like 'C:/tmp/secret.txt', it fails to block access when using NTFS Alternate Data Streams (ADS) syntax, such as 'C:/tmp/secret.txt::$DATA'. This flaw can lead to unauthorized reading of blocked file paths.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://huntr.com/bounties/0439bf3d-cb38-43a5-8314-0fadf85cc5a0; https://huntr.com/bounties/0439bf3d-cb38-43a5-8314-0fadf85cc5a0
CVE: CVE-2024-12374
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in automatic1111/stable-diffusion-webui version git 82a973c. An attacker can upload an HTML file, which the application interprets as content-type application/html. If a victim accesses the malicious link, it will execute arbitrary JavaScript in the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/3dae386a-f442-4be6-87ef-956606c8a6ac
CVE: CVE-2024-12375
Published: 2025-03-20
Description: A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c. This vulnerability allows an attacker to read arbitrary files on the system by sending a specially crafted request to the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-36
References: https://huntr.com/bounties/21952043-395f-4cd3-9374-b73ab9612f27
CVE: CVE-2024-12376
Published: 2025-03-20
Description: A Server-Side Request Forgery (SSRF) vulnerability was identified in the lm-sys/fastchat web server, specifically in the affected version git 2c68a13. This vulnerability allows an attacker to access internal server resources and data that are otherwise inaccessible, such as AWS metadata credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/c9cc3f28-ee9f-4d2d-9ee5-8c6455a11892
CVE: CVE-2024-12387
Published: 2025-03-20
Description: A vulnerability in the binary-husky/gpt_academic repository, as of commit git 3890467, allows an attacker to crash the server by uploading a specially crafted zip bomb. The server decompresses the uploaded file and attempts to load it into memory, which can lead to an out-of-memory crash. This issue arises due to improper input validation when handling compressed file uploads.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-409
References: https://huntr.com/bounties/02b4ab21-d29b-4cd7-ad80-f83081ce82a4; https://huntr.com/bounties/02b4ab21-d29b-4cd7-ad80-f83081ce82a4
CVE: CVE-2024-12388
Published: 2025-03-20
Description: A vulnerability in binary-husky/gpt_academic version 310122f allows for a Regular Expression Denial of Service (ReDoS) attack. The application uses a regular expression to parse user input, which can take polynomial time to match certain crafted inputs. This allows an attacker to send a small malicious payload to the server, causing it to become unresponsive and unable to handle any requests from other users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333
References: https://huntr.com/bounties/b1c01c94-e477-41db-9d17-601aa25e351c
CVE: CVE-2024-12389
Published: 2025-03-20
Description: A path traversal vulnerability exists in binary-husky/gpt_academic version git 310122f. The application supports the extraction of user-provided 7z files without proper validation. The Python py7zr package used for extraction does not guarantee that files will remain within the intended extraction directory. An attacker can exploit this vulnerability to perform arbitrary file writes, which can lead to remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-29
References: https://huntr.com/bounties/37afb1c9-bba9-47ee-8617-a5f715271654
CVE: CVE-2024-12390
Published: 2025-03-20
Description: A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution. The application supports the extraction of user-provided RAR files without proper validation. The Python rarfile module, which supports symlinks, can be exploited to perform arbitrary file writes. This can lead to remote code execution by writing to sensitive files such as SSH keys, crontab files, or the application's own code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59
References: https://huntr.com/bounties/1add2b26-460d-4aa5-8fda-ab045d153177
CVE: CVE-2024-12391
Published: 2025-03-20
Description: A vulnerability in binary-husky/gpt_academic, as of commit 310122f, allows for a Regular Expression Denial of Service (ReDoS) attack. The function '解析项目源码（手动指定和筛选源码文件类型）' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take exponential time to execute, leading to a Denial of Service (DoS) condition. An attacker who controls both the regular expression and the search string can exploit this vulnerability to hang the server for an arbitrary amount of time.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333
References: https://huntr.com/bounties/70b3f4f0-6b1b-4563-a18c-fe46502e6ba0
CVE: CVE-2024-12392
Published: 2025-03-20
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in binary-husky/gpt_academic version git 310122f. The application has a functionality to download papers from arxiv.org, but the URL validation is incomplete. An attacker can exploit this vulnerability to make the application access any URL, including internal services, and read the response. This can be used to access data that are only accessible from the server, such as AWS metadata credentials, and can escalate local exploits to network-based attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://huntr.com/bounties/858de346-698e-4a72-a9e9-3dbd6c60ac18
CVE: CVE-2024-12433
Published: 2025-03-20
Description: A vulnerability in infiniflow/ragflow versions v0.12.0 allows for remote code execution. The RPC server in RagFlow uses a hard-coded AuthKey 'authkey=b'infiniflow-token4kevinhu'' which can be easily fetched by attackers to join the group communication without restrictions. Additionally, the server processes incoming data using pickle deserialization via `pickle.loads()` on `connection.recv()`, making it vulnerable to remote code execution. This issue is fixed in version 0.14.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/infiniflow/ragflow/commit/49494d4e3c8f06a5e52cf1f7cce9fa03cadcfbf6; https://huntr.com/bounties/8a1465af-09e4-42af-9e54-0b70e7c87499
CVE: CVE-2024-12450
Published: 2025-03-20
Description: In infiniflow/ragflow versions 0.12.0, the `web_crawl` function in `document_app.py` contains multiple vulnerabilities. The function does not filter URL parameters, allowing attackers to exploit Full Read SSRF by accessing internal network addresses and viewing their content through the generated PDF files. Additionally, the lack of restrictions on the file protocol enables Arbitrary File Read, allowing attackers to read server files. Furthermore, the use of an outdated Chromium headless version with --no-sandbox mode enabled makes the application susceptible to Remote Code Execution (RCE) via known Chromium v8 vulnerabilities. These issues are resolved in version 0.14.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/infiniflow/ragflow/commit/3faae0b2c2f8a26233ee1442ba04874b3406f6e9; https://huntr.com/bounties/da06360c-87c3-4ba9-be67-29f6eff9d44a; https://huntr.com/bounties/da06360c-87c3-4ba9-be67-29f6eff9d44a
CVE: CVE-2024-12534
Published: 2025-03-20
Description: In version v0.3.32 of open-webui/open-webui, the application allows users to submit large payloads in the email and password fields during the sign-in process due to the lack of character length validation on these inputs. This vulnerability can lead to a Denial of Service (DoS) condition when a user submits excessively large strings, exhausting server resources such as CPU, memory, and disk space, and rendering the service unavailable for legitimate users. This makes the server susceptible to resource exhaustion attacks without requiring authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://huntr.com/bounties/c7c0a4e6-acd3-49b4-8684-2c2c27014b76
CVE: CVE-2024-12537
Published: 2025-03-20
Description: In version 0.3.32 of open-webui/open-webui, the absence of authentication mechanisms allows any unauthenticated attacker to access the `api/v1/utils/code/format` endpoint. If a malicious actor sends a POST request with an excessively high volume of content, the server could become completely unresponsive. This could lead to severe performance issues, causing the server to become unresponsive or experience significant degradation, ultimately resulting in service interruptions for legitimate users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://huntr.com/bounties/edabd06c-acc0-428c-a481-271f333755bc; https://huntr.com/bounties/edabd06c-acc0-428c-a481-271f333755bc
CVE: CVE-2024-12580
Published: 2025-03-20
Description: A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and file_id in the /code/download/:sessionId/:fileId and /download/:userId/:file_id APIs are not validated or filtered, leading to potential log injection attacks. This can cause distortion of monitoring and investigation information, evade detection from security systems, and create difficulties in maintenance and operation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117
References: https://github.com/danny-avila/librechat/commit/95d6bd2c2db4a09b308be2b96e3d5fd522c7b72a; https://huntr.com/bounties/6e477667-dcd4-42c2-b342-a6ce09ffdeeb
CVE: CVE-2024-12704
Published: 2025-03-20
Description: A vulnerability in the LangChainLLM class of the run-llama/llama_index repository, version v0.12.5, allows for a Denial of Service (DoS) attack. The stream_complete method executes the llm using a thread and retrieves the result via the get_response_gen method of the StreamingGeneratorCallbackHandler class. If the thread terminates abnormally before the _llm.predict is executed, there is no exception handling for this case, leading to an infinite loop in the get_response_gen function. This can be triggered by providing an input of an incorrect type, causing the thread to terminate and the process to continue running indefinitely.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/run-llama/llama_index/commit/d1ecfb77578d089cbe66728f18f635c09aa32a05; https://huntr.com/bounties/a0b638fd-21c6-4ba7-b381-6ab98472a02a
CVE: CVE-2024-12720
Published: 2025-03-20
Description: A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_nougat_fast.py. The vulnerability occurs in the post_process_single() function, where a regular expression processes specially crafted input. The issue stems from the regex exhibiting exponential time complexity under certain conditions, leading to excessive backtracking. This can result in significantly high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.46.3 (latest).
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/huggingface/transformers/commit/deac971c469bcbb182c2e52da0b82fb3bf54cccf; https://huntr.com/bounties/4bed1214-7835-4252-a853-22bbad891f98; https://huntr.com/bounties/4bed1214-7835-4252-a853-22bbad891f98
CVE: CVE-2024-12759
Published: 2025-03-20
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-8966. Notes: All CVE users should reference CVE-2024-8966 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-12760
Published: 2025-03-20
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-4940. Notes: All CVE users should reference CVE-2024-4940 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-12761
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://huntr.com/bounties/282900f4-2498-42c4-8ce7-ba5368aaf035
CVE: CVE-2024-12766
Published: 2025-03-20
Description: parisneo/lollms-webui version V13 (feather) suffers from a Server-Side Request Forgery (SSRF) vulnerability in the `POST /api/proxy` REST API. Attackers can exploit this vulnerability to abuse the victim server's credentials to access unauthorized web resources by specifying the JSON parameter `{"url":"http://steal.target"}`. Existing security mechanisms such as `forbid_remote_access(lollmsElfServer)`, `lollmsElfServer.config.headless_server_mode`, and `check_access(lollmsElfServer, request.client_id)` do not protect against this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/a143a2e2-1293-4dec-b[PII_REDACTED]bd2b1; https://huntr.com/bounties/a143a2e2-1293-4dec-b[PII_REDACTED]bd2b1
CVE: CVE-2024-12775
Published: 2025-03-20
Description: langgenius/dify version 0.10.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the test functionality for the Create Custom Tool option via the REST API `POST /console/api/workspaces/current/tool-provider/api/test/pre`. Attackers can set the `url` in the `servers` dictionary in OpenAI's schema with arbitrary URL targets, allowing them to abuse the victim server's credentials to access unauthorized web resources.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://huntr.com/bounties/e90e929a-9bc9-46ad-a5e5-1f6f124d0f12
CVE: CVE-2024-12776
Published: 2025-03-20
Description: In langgenius/dify v0.10.1, the `/forgot-password/resets` endpoint does not verify the password reset code, allowing an attacker to reset the password of any user, including administrators. This vulnerability can lead to a complete compromise of the application.
CVSS Score: 8.1 (HIGH)
CWE: CWE-305
References: https://huntr.com/bounties/00a8b403-7da5-431e-afa3-40339cf734bf