Skip to content
OpenAdvisories

Vendor

danswer-ai

11 known vulnerabilities.

Products

danswer-ai/danswer 10 danswer 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-7957

    Arbitrary File Overwrite in danswer-ai/danswer

    An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerability arises from the load_credentials method, where user-controlled input for realm_name and zuliprc_content is used to co…

    danswer-ai danswer-ai/danswer
  • Critical 9.8
    CVE-2024-32881

    Unauthorized access to GET/SET of Slack Bot Tokens in Danswer

    Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the cus…

    danswer-ai danswer