Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/05 9:22 p.m.6 views

GHSA-F632-VM87-2M2F qdrant has arbitrary file write via `/logger` endpoint

Summary It is possible to append to arbitrary files via /logger endpoint. Minimal privileges are required read-only access. Tested on Qdrant 1.15.5 Details POST /logger Source code link endpoint accepts an attacker-controlled ondisk.logfile path. There are no authorization checks but authenticati...

8.5CVSS6.2AI score0.0049EPSS
SaveExploits1References5
Rows per page
Query Builder