deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-10457
Published: 2025-03-20
Description: Multiple Server-Side Request Forgery (SSRF) vulnerabilities were identified in the significant-gravitas/autogpt repository, specifically in the GitHub Integration and Web Search blocks. These vulnerabilities affect version agpt-platform-beta-v0.1.1. The issues arise when block inputs are controlled by untrusted sources, leading to potential credential leakage, internal network scanning, and unauthorized access to internal services, APIs, or data stores. The affected blocks include GithubListPullRequestsBlock, GithubReadPullRequestBlock, GithubAssignPRReviewerBlock, GithubListPRReviewersBlock, GithubUnassignPRReviewerBlock, GithubCommentBlock, GithubMakeIssueBlock, GithubReadIssueBlock, GithubListIssuesBlock, GithubAddLabelBlock, GithubRemoveLabelBlock, GithubListBranchesBlock, and ExtractWebsiteContentBlock.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/significant-gravitas/autogpt/commit/bcaf3241dadfc1fca024e91fb8f2e3004105a172; https://huntr.com/bounties/1d91e1e1-7d45-4bda-bc27-bfe9052fd975
CVE: CVE-2024-10481
Published: 2025-03-20
Description: A CSRF vulnerability exists in comfyanonymous/comfyui versions up to v0.2.2. This vulnerability allows attackers to host malicious websites that, when visited by authenticated ComfyUI users, can perform arbitrary API requests on behalf of the user. This can be exploited to perform actions such as uploading arbitrary files via the `/upload/image` endpoint. The lack of CSRF protections on API endpoints like `/upload/image`, `/prompt`, and `/history` leaves users vulnerable to unauthorized actions, which could be combined with other vulnerabilities such as stored-XSS to further compromise user sessions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://huntr.com/bounties/f4d5bfb5-6ff1-4356-b81f-f8c01d2e6ded
CVE: CVE-2024-10513
Published: 2025-03-20
Description: A path traversal vulnerability exists in the 'document uploads manager' feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2. This vulnerability allows users with the 'manager' role to access and manipulate the 'anythingllm.db' database file. By exploiting the vulnerable endpoint '/api/document/move-files', an attacker can move the database file to a publicly accessible directory, download it, and subsequently delete it. This can lead to unauthorized access to sensitive data, privilege escalation, and potential data loss.
CVSS Score: 7.2 (HIGH)
CWE: CWE-23, CWE-22
References: https://github.com/mintplex-labs/anything-llm/commit/47a5c7126c20e2277ee56e2c7ee11990886a40a7; https://huntr.com/bounties/ad11cecf-161a-4fb1-986f-6f88272cbb9e
CVE: CVE-2024-10549
Published: 2025-03-20
Description: A vulnerability in the `/3/Parse` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. The endpoint uses a user-specified string to construct a regular expression, which is then applied to another user-specified string. By sending multiple simultaneous requests, an attacker can exhaust all available threads, leading to a complete denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://huntr.com/bounties/ce7bd2d6-fd38-440d-a91a-dd8f3fc06bc2
CVE: CVE-2024-10550
Published: 2025-03-20
Description: A vulnerability in the `/3/ParseSetup` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. The endpoint applies a user-specified regular expression to a user-controllable string. This can be exploited by an attacker to cause inefficient regular expression complexity, leading to the exhaustion of server resources and making the server unresponsive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://huntr.com/bounties/ef3f4d89-3b8b-4618-b134-cb93c1664ec6
CVE: CVE-2024-10553
Published: 2025-03-20
Description: A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitrary code via deserialization of untrusted data. The vulnerability exists in the endpoints POST /99/ImportSQLTable and POST /3/SaveToHiveTable, where user-controlled JDBC URLs are passed to DriverManager.getConnection, leading to deserialization if a MySQL or PostgreSQL driver is available in the classpath. This issue is fixed in version 3.47.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/h2oai/h2o-3/commit/ac1d642b4d86f10a02d75974055baf2a4b2025ac; https://huntr.com/bounties/e6f550dd-eda2-428c-a740-ed8f893a084b
CVE: CVE-2024-10569
Published: 2025-03-20
Description: A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. The component uses pd.read_csv to process input values, which can accept compressed files. An attacker can exploit this by uploading a maliciously crafted zip bomb, leading to a server crash and causing a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-475
References: https://huntr.com/bounties/7192bcbb-08a3-4d22-a321-9c6d19dbfc74; https://huntr.com/bounties/7192bcbb-08a3-4d22-a321-9c6d19dbfc74
CVE: CVE-2024-10572
Published: 2025-03-20
Description: In h2oai/h2o-3 version 3.46.0.1, the `run_tool` command exposes classes in the `water.tools` package through the `ast` parser. This includes the `XGBoostLibExtractTool` class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://huntr.com/bounties/db8939a0-9be8-4d0f-a8b0-1bd181666da2
CVE: CVE-2024-10624
Published: 2025-03-20
Description: A Regular Expression Denial of Service (ReDoS) vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression `^(?:\s*now\s*(?:-\s*(\d+)\s*([dmhs]))?)?\s*$` to process user input. In Python's default regex engine, this regular expression can take polynomial time to match certain crafted inputs. An attacker can exploit this by sending a crafted HTTP request, causing the gradio process to consume 100% CPU and potentially leading to a Denial of Service (DoS) condition on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://huntr.com/bounties/e8d0b248-8feb-4c23-9ef9-be4d1e868374
CVE: CVE-2024-10648
Published: 2025-03-20
Description: A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.
CVSS Score: 8.2 (HIGH)
CWE: CWE-29
References: https://huntr.com/bounties/667d664d-8189-458c-8ed7-483fe8f33c76
CVE: CVE-2024-10650
Published: 2025-03-20
Description: An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloads using a multipart boundary. Although a patch was applied for CVE-2024-7807, the issue can still be exploited by sending data in groups with 10 characters in a line, with multiple lines. This can cause the system to continuously process these characters, resulting in prolonged unavailability of the service. The exploitation now requires low privilege if authentication is enabled due to a version upgrade in Gradio.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/f820371d-a878-44bf-b1fd-2d837dd58eb4; https://huntr.com/bounties/f820371d-a878-44bf-b1fd-2d837dd58eb4
CVE: CVE-2024-10707
Published: 2025-03-20
Description: gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue (CVE-2024-4941). This vulnerability allows unauthenticated users to access arbitrary files on the server by uploading a specially crafted JSON file and exploiting the improper input validation in the handle_dataset_selection function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://huntr.com/bounties/98fdedea-6ad0-4157-b7d2-ae71c9786ee8
CVE: CVE-2024-10713
Published: 2025-03-20
Description: A vulnerability in szad670401/hyperlpr v3.0 allows for a Denial of Service (DoS) attack. The server fails to handle excessive characters appended to the end of multipart boundaries, regardless of the character used. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary, leading to excessive resource consumption and a complete denial of service for all users. The vulnerability is unauthenticated, meaning no user login or interaction is required for an attacker to exploit this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/d5404069-95b3-40e0-a7a4-c3a183d861b0
CVE: CVE-2024-10714
Published: 2025-03-20
Description: A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of Service (DoS) by adding excessive characters to the end of a multipart boundary during file upload. This results in the server continuously processing each character and displaying warnings, rendering the application inaccessible. The issue occurs when the terminal shows a warning: 'multipart.multipart Consuming a byte '0x2d' in end state'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/3e25b76c-714f-4948-8f5a-0ec9a6500068
CVE: CVE-2024-10718
Published: 2025-03-20
Description: In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed in version 1.7.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-614, CWE-319
References: https://github.com/phpipam/phpipam/commit/ddf70ef6801442eb8b0be5eea829e470e653c70e; https://huntr.com/bounties/725bce8f-328f-4fbc-acf5-46ea920cd3c1
CVE: CVE-2024-10719
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam version 1.5.2, specifically in the circuits options functionality. This vulnerability allows an attacker to inject malicious scripts via the 'option' parameter in the POST request to /phpipam/app/admin/circuits/edit-options-submit.php. The injected script can be executed in the context of the user's browser, leading to potential cookie theft and end-user file disclosure. The issue is fixed in version 1.7.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731; https://huntr.com/bounties/56aba8cb-4da1-44b4-8c4d-c5ba00ea3670
CVE: CVE-2024-10720
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability occurs in the 'Device Management' section under 'Administration' where an attacker can inject malicious scripts into the 'Name' and 'Description' fields when adding a new device type. This can lead to data theft, account compromise, distribution of malware, website defacement, and phishing attacks. The issue is fixed in version 1.7.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731; https://huntr.com/bounties/75e06e05-7f69-4938-a83c-1dcc98922188
CVE: CVE-2024-10721
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the application, which can be executed in the context of other users who view the affected page. The issue occurs in the circuits options page (https://demo.phpipam.net/tools/circuits/options/). An attacker can exploit this vulnerability to steal cookies, gain unauthorized access to user accounts, or redirect users to malicious websites. The vulnerability has been fixed in version 1.7.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731; https://huntr.com/bounties/a440a003-84c9-47b5-bfbd-675564abe3d8; https://huntr.com/bounties/a440a003-84c9-47b5-bfbd-675564abe3d8
CVE: CVE-2024-10722
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to data theft, account compromise, distribution of malware, website defacement, content manipulation, and phishing attacks. The issue is fixed in version 1.7.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731; https://huntr.com/bounties/f0bc97b2-33a9-4b15-aa05-ff7c57624847
CVE: CVE-2024-10723
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the destination address field of the NAT tool, which can be executed when a user interacts with the field. The impact of this vulnerability includes the potential theft of user cookies, unauthorized access to user accounts, and redirection to malicious websites. The issue has been fixed in version 1.7.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731; https://huntr.com/bounties/9af99057-e4f6-4d07-b3bb-3213b977801d
CVE: CVE-2024-10724
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address. This vulnerability allows an attacker to execute malicious code. The issue is fixed in version 1.7.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731; https://huntr.com/bounties/0746e357-fcc7-44db-b8e7-857875c54999
CVE: CVE-2024-10725
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the application, which are then executed in the context of other users who view the affected pages. The issue occurs when editing the NAT destination address, where user input is not properly sanitized. This can lead to data theft, account compromise, and other malicious activities. The vulnerability is fixed in version 1.7.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731; https://huntr.com/bounties/343465fa-6dec-40af-a012-7b118e91a771
CVE: CVE-2024-10727
Published: 2025-03-20
Description: A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnerability arises when the application receives data in an HTTP request and includes that data within the immediate response in an unsafe manner. This allows an attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to full compromise of the user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731; https://huntr.com/bounties/259eed22-4d6f-4229-92e5-04674f302d5d; https://huntr.com/bounties/259eed22-4d6f-4229-92e5-04674f302d5d
CVE: CVE-2024-10762
Published: 2025-03-20
Description: In lunary-ai/lunary before version 1.5.9, the /v1/evaluators/ endpoint allows users to delete evaluators of a project by sending a DELETE request. However, the route lacks proper access control, such as middleware to ensure that only users with appropriate roles can delete evaluator data. This vulnerability allows low-privilege users to delete evaluators data, causing permanent data loss and potentially hindering operations.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://github.com/lunary-ai/lunary/commit/[PII_REDACTED]3da24cb7ddedfbbd6e602592b20ef6; https://huntr.com/bounties/23ab508e-d956-4861-b28f-0569d3b404a6
CVE: CVE-2024-10812
Published: 2025-03-20
Description: An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirected to a URL specified by user-controlled input in the 'file' parameter without proper validation or sanitization. This can be exploited by attackers to conduct phishing attacks, distribute malware, and steal user credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://huntr.com/bounties/51408ebd-e0be-489d-8088-f210087dbd6a
CVE: CVE-2024-10819
Published: 2025-03-20
Description: A Cross-Site Request Forgery (CSRF) vulnerability in version 3.83 of binary-husky/gpt_academic allows an attacker to trick a user into uploading files without their consent, exploiting their session. This can lead to unauthorized file uploads and potential system compromise. The uploaded file can contain malicious scripts, leading to stored Cross-Site Scripting (XSS) attacks. Through stored XSS, an attacker can steal information about the victim and perform any action on their behalf.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://huntr.com/bounties/45270c4b-a500-4374-a90b-37b604a3ace0
CVE: CVE-2024-10821
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server (version v5.0.1) allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries, leading to an infinite loop and a complete denial of service for all users. The affected endpoint is `/api/v1/images/upload`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://huntr.com/bounties/0ac24835-c4c0-4f11-938a-d5641dfb80b2
CVE: CVE-2024-10829
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries, leading to an infinite loop and complete denial of service for all users. This vulnerability affects all endpoints processing multipart/form-data requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://huntr.com/bounties/e3a4a0ad-a2e0-497f-a2e0-e3c0ec7c4de4
CVE: CVE-2024-10830
Published: 2025-03-20
Description: A Path Traversal vulnerability exists in the eosphoros-ai/db-gpt version 0.6.0 at the API endpoint `/v1/resource/file/delete`. This vulnerability allows an attacker to delete any file on the server by manipulating the `file_key` parameter. The `file_key` parameter is not properly sanitized, enabling an attacker to specify arbitrary file paths. If the specified file exists, the application will delete it.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/26adf08a-9262-4d5a-a2ee-ce12ed919620; https://huntr.com/bounties/26adf08a-9262-4d5a-a2ee-ce12ed919620
CVE: CVE-2024-10831
Published: 2025-03-20
Description: In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. This vulnerability allows an attacker to upload arbitrary files to arbitrary locations on the target server. The issue arises because the `file_key` and `doc_file.filename` parameters are user-controllable, enabling the construction of paths outside the intended directory. This can lead to overwriting essential system files, such as SSH keys, for further exploitation.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-36
References: https://huntr.com/bounties/5c34c39f-66d4-414c-ab6a-f7888a5d882a
CVE: CVE-2024-10833
Published: 2025-03-20
Description: eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-36
References: https://huntr.com/bounties/dc58e981-e325-4c11-b4e1-1095890fd15a
CVE: CVE-2024-10834
Published: 2025-03-20
Description: eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. The issue arises from the ability to pass an absolute path to a call to `os.path.join`, enabling an attacker to write files to arbitrary locations on the target server. This vulnerability can be exploited by setting the `doc_file.filename` to an absolute path, which can lead to overwriting system files or creating new SSH-key entries.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-73
References: https://huntr.com/bounties/0d598508-151a-4050-9ccd-31bb82955e7a
CVE: CVE-2024-10835
Published: 2025-03-20
Description: In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/sql/run` allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write using DuckDB SQL, enabling them to write arbitrary files to the victim's file system. This can potentially lead to Remote Code Execution (RCE).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://huntr.com/bounties/e32fda74-ca83-431c-8de8-08274ba686c9
CVE: CVE-2024-10901
Published: 2025-03-20
Description: In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/chart/run` allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write, enabling them to write arbitrary files to the victim's file system. This can potentially lead to Remote Code Execution (RCE) by writing malicious files such as `__init__.py` in the Python's `/site-packages/` directory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://huntr.com/bounties/db2c1d59-6e3a-4553-a1f6-94c8df162a18
CVE: CVE-2024-10902
Published: 2025-03-20
Description: In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Traversal. This vulnerability allows unauthorized attackers to upload arbitrary files to the victim's file system at any location. The impact of this vulnerability includes the potential for remote code execution (RCE) by writing malicious files, such as a malicious `__init__.py` in the Python's `/site-packages/` directory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://huntr.com/bounties/f7fbf76e-aa1c-4106-b007-e9579f4f7d5f
CVE: CVE-2024-10906
Published: 2025-03-20
Description: In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance of `CORSMiddleware` which sets the `Access-Control-Allow-Origin` to `*` for all requests. This configuration makes all endpoints exposed by the server vulnerable to Cross-Site Request Forgery (CSRF). An attacker can exploit this vulnerability to interact with any endpoints of the instance, even if the instance is not publicly exposed to the network.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://huntr.com/bounties/8864aca5-a342-4dab-b866-b2882ba6f160