CVE-2024-6707
Open WebUI Arbitrary File Upload + Path Traversal
概要
Open WebUI Arbitrary File Upload + Path Traversal
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.
参照URL
- advisory github.com
- advisory korelogic.com
- advisory nvd.nist.gov
- package github.com
- web seclists.org
- web openwall.com