CVE-2024-39722 - An issue was discovered in Ollama before 0.1.46

Back Back to CVE browser

HIGH

An issue was discovered in Ollama before 0.1.46

Published Oct 31, 2024

7.5

HIGH

CVSS 3.1

EPSS 3.97%

Description

An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in the api/push route.

Affected products

Vendor Ollama Product Ollama Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <0.1.46

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ollama

n/a

Version	Status	Constraints
0	affected	<0.1.46

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-38206
Advisory
https://www.oligo.security/blog/more-models-more-probllms
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-38206		Advisory
https://www.oligo.security/blog/more-models-more-probllms		ExploitThird Party Advisory