CVE-2024-6707
Open WebUI Arbitrary File Upload + Path Traversal
Summary
Open WebUI Arbitrary File Upload + Path Traversal
Original description
The description as published by the source.
Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.
References
- advisory github.com
- advisory korelogic.com
- advisory nvd.nist.gov
- package github.com
- web seclists.org
- web openwall.com