CVE-2024-6583 - Path Traversal in stangirard/quivr

Back Back to CVE browser

MEDIUM

Path Traversal in stangirard/quivr

Published Mar 20, 2025

4.3

MEDIUM

CVSS 3.0

EPSS 0.60%

Description

A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

Affected products

Vendor Stangirard Product Stangirard/quivr Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=latest

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Stangirard

Stangirard/quivr

n/a

Version	Status	Constraints
unspecified	affected	<=latest

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-23

References (1)

https://huntr.com/bounties/c310b500-ec26-4121-8d3a-8e863181346f
ExploitThird Party Advisory

Link	Providers	Tags
https://huntr.com/bounties/c310b500-ec26-4121-8d3a-8e863181346f		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner @huntr_ai

Published Mar 20, 2025

Updated Mar 20, 2025

Reserved Jul 8, 2024

Link CVE-2024-6583

CISA Vulnrichment

Updated Mar 20, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-6583

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-6583