Lucene search
+L

116 matches found

NVD
NVD
•added 2025/06/29 8:15 a.m.•22 views

CVE-2025-6853

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function uploadtempdocs of the file /knowledgebase/uploadtempdocs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to...

9.8CVSS0.00585EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/06/29 7:31 a.m.•29 views

CVE-2025-6853 chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function uploadtempdocs of the file /knowledgebase/uploadtempdocs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to...

6.5CVSS0.00585EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/06/29 7:31 a.m.•8 views

CVE-2025-6853 chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function uploadtempdocs of the file /knowledgebase/uploadtempdocs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to...

6.5CVSS7.2AI score0.00585EPSS
SaveExploits1References4
Mend
Mend
•added 2025/06/29 7:31 a.m.•2 views

CVE-2025-6853

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function uploadtempdocs of the file /knowledgebase/uploadtempdocs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to...

9.8CVSS0.00585EPSS
SaveExploits1References9
CVE
CVE
•added 2025/06/29 7:31 a.m.•54 views

CVE-2025-6853

CVE-2025-6853 affects the Langchain-Chatchat backend component in the project "chatchat-space" up to version 0.3.1. The vulnerability is in the function upload_temp_docs under /knowledge_base/upload_temp_docs, where manipulating the flag argument enables a path traversal. The issue can be exploit...

9.8CVSS6.1AI score0.00585EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/06/29 12:00 a.m.•24 views

PT-2025-27354

Name of the Vulnerable Software and Affected Versions: Langchain-Chatchat versions up to 0.3.1 Description: A critical vulnerability has been found in Langchain-Chatchat, affecting the upload temp docs function of the /knowledge base/upload temp docs file in the Backend component. The manipulatio...

9.8CVSS6.2AI score0.00585EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2025/06/29 12:00 a.m.•31 views

PT-2025-27355

Name of the Vulnerable Software and Affected Versions: Langchain-Chatchat versions up to 0.3.1 Description: A problematic vulnerability was found in Langchain-Chatchat, affecting unknown code of the file "/v1/files?purpose=assistants". This issue leads to path traversal and can be initiated...

5.3CVSS5.2AI score0.00578EPSS
SaveExploits1References15
CNNVD
CNNVD
•added 2025/06/29 12:00 a.m.•18 views

LangChain-Chatchat 路径遍历漏洞

LangChain-Chatchat is a Chatchat-Space open source chatbot software developed based on the LangChain framework. A path traversal vulnerability exists in LangChain-Chatchat 0.3.1 and earlier versions, which stems from path traversal due to incorrect manipulation of the parameter flag in the file...

8.8CVSS5.9AI score0.0067EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/06/29 12:00 a.m.•14 views

LangChain-Chatchat 路径遍历漏洞

LangChain-Chatchat is a Chatchat-Space open source chatbot software developed based on the LangChain framework. A path traversal vulnerability exists in LangChain-Chatchat 0.3.1 and earlier versions, which stems from path traversal due to incorrect manipulation of the parameter flag in the file...

9.8CVSS6.2AI score0.00585EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/29 12:00 a.m.•15 views

LangChain-Chatchat 路径遍历漏洞

LangChain-Chatchat is a Chatchat-Space open source chatbot software developed based on the LangChain framework. A path traversal vulnerability exists in Langchain-Chatchat 0.3.1 and earlier versions, which stems from a path traversal due to incorrect manipulation of the file...

5.3CVSS4.5AI score0.00578EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/06/29 12:00 a.m.•3 views

PT-2025-45691

A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to...

5.3CVSS0.00578EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/29 12:00 a.m.•2 views

CVE-2025-6855: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may ...

8.8CVSS5.4AI score0.0067EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/29 12:00 a.m.•3 views

CVE-2025-6854: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to...

5.3CVSS5.1AI score0.00578EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/29 12:00 a.m.•2 views

CVE-2025-6853: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function uploadtempdocs of the file /knowledgebase/uploadtempdocs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to...

9.8CVSS5.2AI score0.00585EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/29 12:00 a.m.•3 views

PT-2025-45710

A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may ...

8.8CVSS0.0067EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/06/29 12:00 a.m.•26 views

PT-2025-27356

Name of the Vulnerable Software and Affected Versions: chatchat-space Langchain-Chatchat versions up to 0.3.1 Description: A critical issue has been found in the processing of the file "/v1/file". The manipulation of the flag argument leads to path traversal. The exploit has been disclosed to the...

8.8CVSS5.4AI score0.0067EPSS
SaveExploits1References14
Rows per page
Query Builder