Skip to content
OpenAdvisories

Vendor

stangirard

5 known vulnerabilities.

Products

stangirard/quivr 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-6583

    Path Traversal in stangirard/quivr

    A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

    stangirard stangirard/quivr
  • Medium 6.8
    CVE-2024-6229

    Stored XSS in stangirard/quivr

    A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version. Users can upload files via URL, which allows the insertion of malicious JavaScript payloads. These payloads are store…

    stangirard stangirard/quivr