vulnerability-disclosures

REA Group Security Vulnerability Disclosures REA Groupht...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41704

Technical details about CVE-2024-41704 are not provided in the connected documents; monitor for updates.

CVE-2024-41703

LibreChat up to version 0.7.4-rc1 has an incorrect access control for message updates. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) with the same description. The CVSS-based impact is listed as critical in NVD (high confidentiality, integrity, and availability im...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

PT-2024-29525

Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.7.4-rc1 Description The issue is related to incorrect access control for message updates. Recommendations For versions prior to 0.7.4-rc1, at the moment, there is no information about a newer version that contains...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

PT-2024-29526

Name of the Vulnerable Software and Affected Versions LibreChat versions through 0.7.4-rc1 Description The issue is related to the lack of validation of normalized pathnames of images. This could potentially lead to unspecified consequences. Recommendations For versions through 0.7.4-rc1, conside...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41703: Improper Access Control

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41704: Improper Limitation of a Pathname to a Restricted Directory

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

LibreChat Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible LibreChat instance on the target application. LibreChat is an enhanced open-source ChatGPT clone. This detection is included in the AI and LLM category. No source data...