Lucene search
KoreLogicCVELIST:CVE-2024-6707HistoryAug 07, 2024 - 11:04 p.m.
CVE-2024-6707 Open WebUI Arbitrary File Upload + Path Traversal
2024-08-0723:04:45
CWE-434
CWE-22
KoreLogic
www.cve.org
6
arbitrary file upload
path traversal
web server
filesystem
vulnerability
cve-2024-6707
EPSS
0.001
Percentile
31.4%
Attacker controlled files can be uploaded to arbitrary locations on the web server’s filesystem by abusing a path traversal vulnerability.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Open WebUI",
"repo": "https://github.com/open-webui/open-webui",
"vendor": "Open WebUI",
"versions": [
{
"status": "affected",
"version": "0.1.105"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-6707 Open WebUI Arbitrary File Upload + Path Traversal
2024-08-07 23:04:45
packetstorm
packetstorm
Open WebUI 0.1.105 File Upload / Path Traversal
2024-08-08 00:00:00
cve
cve
CVE-2024-6707
2024-08-07 23:15:41
zdt
zdt
Open WebUI 0.1.105 File Upload / Path Traversal Vulnerabilities
2024-08-08 00:00:00
korelogic
korelogic
Open WebUI Arbitrary File Upload + Path Traversal
2024-08-07 00:00:00
nvd
nvd
CVE-2024-6707
2024-08-07 23:15:41