deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-8958
Published: 2025-03-20
Description: In composiohq/composio version 0.4.3, there is an unrestricted file write and read vulnerability in the filetools actions. Due to improper validation of file paths, an attacker can read and write files anywhere on the server, potentially leading to privilege escalation or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://huntr.com/bounties/e152b094-0593-428e-b813-068d2390ce68; https://huntr.com/bounties/e152b094-0593-428e-b813-068d2390ce68
CVE: CVE-2024-8966
Published: 2025-03-20
Description: A vulnerability in the file upload process of gradio-app/gradio version @gradio/video@0.10.2 allows for a Denial of Service (DoS) attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue warnings. This can render Gradio inaccessible for extended periods, disrupting services and causing significant downtime.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/gradio-app/gradio/commit/f1718c47137f9c60240da7afe5e3290aa0f1cb47; https://huntr.com/bounties/7b5932bb-58d1-4e71-b85c-43dc40522ff2; https://huntr.com/bounties/7b5932bb-58d1-4e71-b85c-43dc40522ff2
CVE: CVE-2024-8982
Published: 2025-03-20
Description: A Local File Inclusion (LFI) vulnerability in OpenLLM version 0.6.10 allows attackers to include files from the local server through the web application. This flaw could expose internal server files and potentially sensitive information such as configuration files, passwords, and other critical data. Unauthorized access to critical server files, such as configuration files, user credentials (/etc/passwd), and private keys, can lead to a complete compromise of the system's security. Attackers could leverage the exposed information to further penetrate the network, exfiltrate data, or escalate privileges within the environment.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-29
References: https://huntr.com/bounties/b7bdc9a1-51ac-402a-8e6e-0d977699aca6
CVE: CVE-2024-8984
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability exists in berriai/litellm version v1.44.5. This vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction, impacting all users of the service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/berriai/litellm/commit/4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61; https://huntr.com/bounties/554fc76b-3097-4223-b4cf-110b853e9355
CVE: CVE-2024-8998
Published: 2025-03-20
Description: A Regular Expression Denial of Service (ReDoS) vulnerability exists in lunary-ai/lunary version git f07a845. The server uses the regex /{.*?}/ to match user-controlled strings. In the default JavaScript regex engine, this regex can take polynomial time to match certain crafted user inputs. As a result, an attacker can cause the server to hang for an arbitrary amount of time by submitting a specially crafted payload. This issue is fixed in version 1.4.26.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: https://github.com/lunary-ai/lunary/commit/f2bfa036caf2c48686474f4560a9c5abcf5f43b7; https://huntr.com/bounties/4dbd8648-1dca-4f95-b74f-978ef030e97e; https://huntr.com/bounties/4dbd8648-1dca-4f95-b74f-978ef030e97e
CVE: CVE-2024-8999
Published: 2025-03-20
Description: lunary-ai/lunary version v1.4.25 contains an improper access control vulnerability in the POST /api/v1/data-warehouse/bigquery endpoint. This vulnerability allows any user to export the entire database data by creating a stream to Google BigQuery without proper authentication or authorization. The issue is fixed in version 1.4.26.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/lunary-ai/lunary/commit/aa0fd22952d1d84a717ae563eb1ab564d94a9e2b; https://huntr.com/bounties/d42b7a44-0dcb-4ef0-b15c-d0e558da65c6
CVE: CVE-2024-9000
Published: 2025-03-20
Description: In lunary-ai/lunary before version 1.4.26, the checklists.post() endpoint allows users to create or modify checklists without validating whether the user has proper permissions. This missing access control permits unauthorized users to create checklists, bypassing intended permission checks. Additionally, the endpoint does not validate the uniqueness of the slug field when creating a new checklist, allowing an attacker to spoof existing checklists by reusing the slug of an already-existing checklist. This can lead to significant data integrity issues, as legitimate checklists can be replaced with malicious or altered data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/lunary-ai/lunary/commit/a02861ef9bb6ce860a35f7b8f178d58859cd85f0; https://huntr.com/bounties/f5fca549-0a4a-4f64-8ccf-d4e108856da4
CVE: CVE-2024-9016
Published: 2025-03-20
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-45595. Notes: All CVE users should reference CVE-2024-45595 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-9052
Published: 2025-03-20
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-9053
Published: 2025-03-20
Description: vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-78
References: https://huntr.com/bounties/75a544f3-34a3-4da0-b5a3-1495cb031e09
CVE: CVE-2024-9056
Published: 2025-03-20
Description: BentoML version v1.3.4post1 is vulnerable to a Denial of Service (DoS) attack. The vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. This causes the server to continuously process each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction, impacting all users of the service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/a24a13c2-0300-4a95-b26a-ac7fe8f6521b
CVE: CVE-2024-9070
Published: 2025-03-20
Description: A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://huntr.com/bounties/7be6fc22-be18-44ee-a001-ac7158d5e1a5
CVE: CVE-2024-9095
Published: 2025-03-20
Description: In lunary-ai/lunary version v1.4.28, the /bigquery API route lacks proper access control, allowing any logged-in user to create a Datastream to Google BigQuery and export the entire database. This includes sensitive data such as password hashes and secret API keys. The route is protected by a config check (`config.DATA_WAREHOUSE_EXPORTS_ALLOWED`), but it does not verify the user's access level or implement any access control middleware. This vulnerability can lead to the extraction of sensitive data, disruption of services, credential compromise, and service integrity breaches.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/lunary-ai/lunary/commit/a8d7b2959e87c30fbafdb12af7ffa093385dcc60; https://huntr.com/bounties/e242a92e-da41-440d-b718-3de91e4b4eac
CVE: CVE-2024-9096
Published: 2025-03-20
Description: In lunary-ai/lunary version 1.4.28, the /checklists/:id route allows low-privilege users to modify checklists by sending a PATCH request. The route lacks proper access control, such as middleware to ensure that only authorized users (e.g., project owners or admins) can modify checklist data. This vulnerability allows any user associated with the project, regardless of their role, to modify checklists, including changing the slug or data fields, which can lead to tampering with essential project workflows, altering business logic, and introducing errors that undermine integrity.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862
References: https://github.com/lunary-ai/lunary/commit/a8d7b2959e87c30fbafdb12af7ffa093385dcc60; https://huntr.com/bounties/653e7109-4c21-4e33-b636-7598d3202b9a
CVE: CVE-2024-9098
Published: 2025-03-20
Description: In lunary-ai/lunary before version 1.4.30, a privilege escalation vulnerability exists where admins can invite new members with billing permissions, thereby gaining unauthorized access to billing resources. This issue arises because the user creation endpoint does not restrict admins from inviting users with billing roles. As a result, admins can circumvent the intended access control, posing a risk to the organization's financial resources.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-863
References: https://github.com/lunary-ai/lunary/commit/a8d7b2959e87c30fbafdb12af7ffa093385dcc60; https://huntr.com/bounties/75d466ae-8591-44d5-9160-eea7cad0c4fc
CVE: CVE-2024-9099
Published: 2025-03-20
Description: In lunary-ai/lunary version v1.4.29, the GET /projects API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This vulnerability allows unauthorized users to retrieve sensitive credentials, which can be used to perform actions on behalf of the project, access private data, and delete resources. The private API keys are exposed in the developer tools when the endpoint is called from the frontend.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1230
References: https://github.com/lunary-ai/lunary/commit/8ba1b8ba2c2c30b1cec30eb5777c1fda670cbbfc; https://huntr.com/bounties/ffb84fe8-3e60-4200-ac2d-1fd1e1c93e91
CVE: CVE-2024-9107
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerability arises from improper sanitization of HTML tags in chat history uploads. Specifically, the sanitization logic fails to handle HTML tags within code blocks correctly, allowing an attacker to inject malicious scripts. This can lead to the execution of arbitrary JavaScript code in the context of the user's browser, potentially leading to identity theft or other malicious actions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/a2972c51-4780-4f60-afbf-a7a8ee4066ea
CVE: CVE-2024-9159
Published: 2025-03-20
Description: An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://huntr.com/bounties/ab0f8fbb-c17a-45a7-8dab-7d4c8b90490a
CVE: CVE-2024-9216
Published: 2025-03-20
Description: An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user's username to the get_model function, thereby gaining unauthorized access to that user's chat history.
CVSS Score: 8.1 (HIGH)
CWE: CWE-304
References: https://huntr.com/bounties/21e54c3f-e2d7-423b-9890-1f0cb99af4dd
CVE: CVE-2024-9229
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource consumption by appending characters to the end of a multipart boundary in an HTTP request. This leads to the server continuously processing each character, rendering the service unavailable and impacting all users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/946a412d-422f-4623-bb1d-d2646ad23dfd
CVE: CVE-2024-9308
Published: 2025-03-20
Description: An open redirect vulnerability in haotian-liu/llava version v1.2.0 (LLaVA-1.6) allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://huntr.com/bounties/6233a165-a435-464d-915c-4c7510ffbf82
CVE: CVE-2024-9309
Published: 2025-03-20
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Controller API Server in haotian-liu/llava version v1.2.0 (LLaVA-1.6). This vulnerability allows attackers to exploit the victim Controller API Server's credentials to perform unauthorized web actions or access unauthorized web resources.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-918
References: https://huntr.com/bounties/2ba6be79-5c90-48fa-99cb-82503ea49a12
CVE: CVE-2024-9311
Published: 2025-03-20
Description: A Cross-Site Request Forgery (CSRF) vulnerability in haotian-liu/llava v1.2.0 (LLaVA-1.6) allows an attacker to upload files with malicious content without authentication or user interaction. The uploaded file is stored in a predictable path, enabling the attacker to execute arbitrary JavaScript code in the context of the victim's browser by visiting the crafted file URL. This can lead to theft of sensitive information, session hijacking, or other actions compromising the security and privacy of the victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://huntr.com/bounties/15b18b85-5a6b-43e7-bc65-6b4772871e98
CVE: CVE-2024-9340
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by sending malformed multipart requests with arbitrary characters appended to the end of multipart boundaries. This flaw in the multipart request boundary processing mechanism leads to an infinite loop, resulting in a complete denial of service for all users. Affected endpoints include `/api/v1/login` and `/api/v1/device_authorization`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://github.com/zenml-io/zenml/commit/cba152eb9ca3071c8372b0b91c02d9d3351de48d; https://huntr.com/bounties/c9200654-7dc0-4c1d-8573-ab79a87fb4f6
CVE: CVE-2024-9362
Published: 2025-03-20
Description: An unauthenticated directory traversal vulnerability exists in Polyaxon, affecting the latest version. This vulnerability allows an attacker to retrieve directory information and file contents from the server without proper authorization, leading to sensitive information disclosure. The issue enables access to system directories such as `/etc`, potentially resulting in significant security risks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/d8dcb40f-ce76-4524-8d06-e0f12a07809d
CVE: CVE-2024-9363
Published: 2025-03-20
Description: An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform, which can lead to denial of service by terminating critical containers. An attacker can delete important files within the containers, such as `polyaxon.sock`, causing the API container to exit unexpectedly. This disrupts related services and prevents the system from functioning normally, without requiring authentication or UUID parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23
References: https://huntr.com/bounties/ec7b7e1d-795d-4414-93d5-9df35d2fd391
CVE: CVE-2024-9365
Published: 2025-03-20
Description: A Cross-Site Request Forgery (CSRF) vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser. This includes creating projects, model versions, and artifact versions, or changing settings. The impact of this vulnerability includes potential data loss and service disruption.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://huntr.com/bounties/cdfa012b-a694-4beb-9a9a-12a9dde07ef9
CVE: CVE-2024-9415
Published: 2025-03-20
Description: A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. This vulnerability allows an attacker to upload an arbitrary file to the server, potentially leading to remote code execution or overwriting any file on the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/31bdf98c-5205-4c48-9bc7-9e780ba63398
CVE: CVE-2024-9418
Published: 2025-03-20
Description: In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext. This vulnerability allows an attacker to retrieve the password of another user, leading to potential account takeover.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-256
References: https://huntr.com/bounties/9a8118a2-ea32-41f5-b501-fef4f31d8213
CVE: CVE-2024-9431
Published: 2025-03-20
Description: In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After logging into the system, users can change the passwords of other users, leading to potential account takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-620
References: https://huntr.com/bounties/9b33d7c1-ed0a-4f5b-a378-694570fd990b
CVE: CVE-2024-9437
Published: 2025-03-20
Description: SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack. The vulnerability exists in the resource upload request, where appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request causes the server to continuously process each character. This leads to excessive resource consumption and renders the service unavailable. The issue is unauthenticated and does not require any user interaction, impacting all users of the service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://huntr.com/bounties/27404e9c-eb3d-4626-a9d9-8dc1b3295ce0
CVE: CVE-2024-9439
Published: 2025-03-20
Description: SuperAGI is vulnerable to remote code execution in the latest version. The `agent template update` API allows attackers to control certain parameters, which are then fed to the eval function without any sanitization or checks in place. This vulnerability can lead to full system compromise.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://huntr.com/bounties/d710884f-b5ab-4b31-a2e6-e4b38488def1
CVE: CVE-2024-9447
Published: 2025-03-20
Description: An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. The `/get/organisation/` endpoint does not verify the user's organization, allowing any authenticated user to retrieve sensitive configuration details, including API keys, of any organization. This could lead to unauthorized access to services and significant data breaches or financial loss.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1230
References: https://huntr.com/bounties/c952ea32-3047-42d3-8a3e-e67899e35dfd
CVE: CVE-2024-9597
Published: 2025-03-20
Description: A Path Traversal vulnerability exists in the `/wipe_database` endpoint of parisneo/lollms version v12, allowing an attacker to delete any directory on the system. The vulnerability arises from improper validation of the `key` parameter, which is used to construct file paths. An attacker can exploit this by sending a specially crafted HTTP request to delete arbitrary directories.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/1f6c8908-d486-4141-be55-25bd29933d8b
CVE: CVE-2024-9606
Published: 2025-03-20
Description: In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerability where the API key masking code only masks the first 5 characters of the key. This results in the leakage of almost the entire API key in the logs, exposing a significant amount of the secret key. The issue affects version v1.44.9.
CVSS Score: 7.5 (HIGH)
CWE: CWE-117, CWE-116
References: https://github.com/berriai/litellm/commit/9094071c4782183e84f10630e2450be3db55509a; https://huntr.com/bounties/4a03796f-a8d4-4293-84ef-d[PII_REDACTED]a
CVE: CVE-2024-9612
Published: 2025-03-20
Description: In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end does not verify the visibility status of the search page. Consequently, attackers can directly call the API to access the functionalities provided by the search page, bypassing the visibility restriction set by the administrator.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1100
References: https://huntr.com/bounties/c1046fa0-a719-475e-ba62-2b97873fbac4; https://huntr.com/bounties/c1046fa0-a719-475e-ba62-2b97873fbac4
CVE: CVE-2024-9617
Published: 2025-03-20
Description: An IDOR vulnerability in danswer-ai/danswer v0.3.94 allows an attacker to view any files. The application does not verify whether the attacker is the creator of the file, allowing the attacker to directly call the GET /api/chat/file/{file_id} interface to view any user's file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://huntr.com/bounties/8f683ff6-3a99-41c6-b763-a8f7b73bd146
CVE: CVE-2024-9699
Published: 2025-03-20
Description: A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to upload a file with a JavaScript payload disguised as a filename. This can lead to a Cross-Site Scripting (XSS) attack if the uploaded file is accessed by other users. The issue is fixed in version 1.4.dev.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/flatpressblog/flatpress/commit/f[PII_REDACTED]34a7eae02aa2320edd6de7466ec85; https://huntr.com/bounties/a993a05f-be50-4983-a44a-3bbff1ec00db
CVE: CVE-2024-9701
Published: 2025-03-20
Description: A Remote Code Execution (RCE) vulnerability has been identified in the Kedro ShelveStore class (version 0.19.8). This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class uses Python's shelve module to manage session data, which relies on pickle for serialization. Crafting a malicious payload and storing it in the shelve file can lead to RCE when the payload is deserialized.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/kedro-org/kedro/commit/d79fa51de55ac0ccb58cce1a482df1b445f0fe7c; https://huntr.com/bounties/96c77fef-93b2-4d4d-8cbe-57a718d8eea5
CVE: CVE-2024-9840
Published: 2025-03-20
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-53981. Notes: All CVE users should reference CVE-2024-53981 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.