CVE-2024-6583 - CVE House
Back to Database
Status published Medium CVE-2024-6583

Path Traversal in stangirard/quivr

Vulnerability Description

A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6583

Credits & Attribution

No credits recorded in the NVD database.

References

More from stangirard

View All →
CVE-2024-9229
Denial of Service (DoS) via Multipart Boundary in stangirard/quivr
High 7.5
CVE-2024-6229
Stored XSS in stangirard/quivr
Medium 6.8
CVE-2024-5885
Server-Side Request Forgery (SSRF) in stangirard/quivr
High 8.6
CVE-2024-4851
SSRF Vulnerability in stangirard/quivr
High 7.7

Affected Vendor

Affected Software

stangirard/quivr
Vulnerable Versions:
unspecified

Timeline

Official Publish: March 20th, 2025
Last Modified: March 20th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-23

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1105 Ingress Tool Transfer
Command and Control
T1565 Data Manipulation
Impact