Skip to content
OpenAdvisories

Product · danswer-ai

danswer-ai/danswer

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-7957

    Arbitrary File Overwrite in danswer-ai/danswer

    An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerability arises from the load_credentials method, where user-controlled input for realm_name and zuliprc_content is used to co…

    danswer-ai danswer-ai/danswer