CVE-2024-4888

🗓️ 06 Jun 2024 18:31:09Reported by @huntr_aiType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

BerriAI's latest version vulnerability: arbitrary file deletion due to improper input validation on '/audio/transcriptions' endpoint. Allows unauthorized deletion of critical files

Reporter	Title	Published	Views	Family All 11
CNNVD	LiteLLM Input Validation Error Vulnerability	6 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-4888 Arbitrary File Deletion in BerriAI/litellm	6 Jun 202418:31	–	cvelist
EUVD	EUVD-2024-1906	3 Oct 202520:07	–	euvd
Github Security Blog	Arbitrary file deletion in litellm	6 Jun 202421:30	–	github
NVD	CVE-2024-4888	6 Jun 202419:16	–	nvd
OSV	GHSA-3XR8-QFVJ-9P9J Arbitrary file deletion in litellm	6 Jun 202421:30	–	osv
Positive Technologies	PT-2024-33255 · Berriai · Litellm	6 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-4888	23 May 202507:36	–	redhatcve
Veracode	Arbitrary File Deletion	11 Jun 202406:32	–	veracode
vulnersOsv	aiconsole (>=0.2.0 <=0.2.13), aider-chat (>=0.29.0 <=0.31.1) +53 more potentially affected by CVE-2024-4888 via litellm (>=0.11.1 <=1.35.35)	6 Jun 202421:30	–	vulnersosv

NVD

Vulnrichment

Node

litellm litellmRange<1.35.19

[
  {
    "vendor": "berriai",
    "product": "berriai/litellm",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/48461d89-cf13-4ad3-a43e-0d37da08fc6c

Parameter	Position	Path	Description	CWE
filename	request body	/audio/transcriptions	Arbitrary file deletion via improper input validation on the /audio/transcriptions endpoint, allowing an attacker to specify a server file path and trigger os.remove(file.filename) without proper authorization.	CWE-862

21 Nov 2024 09:43Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.1

CVSS 36.5

EPSS0.00057

SSVC

CWE-862