Path Traversal Vulnerability in Stangirard Quivr Product

CVE-2024-6583

What is CVE-2024-6583?

A path traversal vulnerability has been identified in the latest version of Stangirard Quivr, allowing attackers to exploit the file upload functionality. By manipulating the file path in the upload request, an attacker can upload files to arbitrary locations within an S3 bucket. This poses a significant threat as it may lead to unauthorized access or exposure of sensitive files. Proper sanitization and validation of file paths are essential to mitigate this risk.

References