CVE-2024-6583CWE-23

Path Traversal in stangirard/quivr

Medium · published March 20, 2025

CVSS v3.0
4.3
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00607 · 48.3th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2025-03-20T10:10Z
EPSS history
Timeline
  • 20 MAR 10:10Z
    Path Traversal in stangirard/quivr
    cvelistv5