Skip to content
OpenAdvisories

Vendor

qdrant

4 known vulnerabilities.

Products

qdrant/qdrant 3 qdrant 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-3829 Public exploit

    Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

    qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlin…

    qdrant qdrant/qdrant qdrant-client PyPI
  • Critical 9.8
    CVE-2024-3584

    Path Traversal in qdrant/qdrant

    qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint. By manipulating the `name` parameter through URL encoding, an attacker can upload a file to an arbitrary l…

    qdrant qdrant/qdrant qdrant crates.io
  • Critical 9.8
    CVE-2024-2221

    Path Traversal and Arbitrary File Upload Vulnerability in qdrant/qdrant

    qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/{COLLECTION}/snapshots/upload` endpoint, specifically through the `snapshot` parameter. This vulnerability allows attackers to upload and overwrite a…

    qdrant qdrant/qdrant