PT-2025-12164

CVE-2024-6583

·

Published

2025-03-20

·

Updated

2025-03-20

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions stangirard/quivr (affected versions not specified)
Description A path traversal issue exists, allowing an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request. This enables unauthorized access to sensitive areas of the system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾