We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-52787



Description

An issue in the upload_documents method of libre-chat v0.0.6 allows attackers to execute a path traversal via supplying a crafted filename in an uploaded file.

Reserved 2024-11-15 | Published 2024-11-25 | Updated 2024-11-27 | Assigner mitre

References

github.com/vemonet/libre-chat/pull/9

github.com/vemonet/libre-chat/issues/10

github.com/...ommit/dbb8e3400e5258112179783d74c9cc54310cb72b

gist.github.com/jxfzzzt/276a6e8cfbc54d2c2711bb51d8d3dff3

cve.org (CVE-2024-52787)

nvd.nist.gov (CVE-2024-52787)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-52787

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.