Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-47022

Malicious code in bioql PyPI...

8.6CVSS8.8AI score0.00301EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:20 a.m.8 views

CVE-2024-5885

stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery SSRF vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious user to gain acces...

8.6CVSS8.6AI score0.00301EPSS
Exploits1References1
NVD
NVD
added 2024/06/27 7:15 p.m.19 views

CVE-2024-5885

stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery SSRF vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious user to gain acces...

8.6CVSS0.00301EPSS
Exploits1References1
CVE
CVE
added 2024/06/27 6:45 p.m.47 views

CVE-2024-5885

CVE-2024-5885 concerns the Quivr project: stangirard/quivr v0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The issue arises from insufficient controls when the crawler accesses external websites, enabling an attacker to reach internal/local-network resources, including inter...

8.6CVSS8.6AI score0.00301EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/27 6:45 p.m.13 views

CVE-2024-5885 Server-Side Request Forgery (SSRF) in stangirard/quivr

stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery SSRF vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious user to gain acces...

8.6CVSS7.2AI score0.00301EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/06/27 6:45 p.m.17 views

CVE-2024-5885 Server-Side Request Forgery (SSRF) in stangirard/quivr

stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery SSRF vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious user to gain acces...

8.6CVSS0.00301EPSS
Exploits1References1
Rows per page
Query Builder