What is GHSA-3864-rp2m-2qfj?

GHSA-3864-rp2m-2qfj is a security advisory published by GitHub Security Advisories with Medium severity. libre-chat Path Traversal vulnerability

Which CVE IDs does GHSA-3864-rp2m-2qfj cover?

GHSA-3864-rp2m-2qfj covers the following CVE IDs: CVE-2024-52787. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3864-rp2m-2qfj?

GHSA-3864-rp2m-2qfj has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

Which products are affected by GHSA-3864-rp2m-2qfj?

GHSA-3864-rp2m-2qfj affects 1 product, including: pip/libre-chat:\u003c= 0.0.6.

GHSA-3864-rp2m-2qfjMediumCVSS 9.1

libre-chat Path Traversal vulnerability

Vendor

GitHub Security Advisories

Published

November 25, 2024

Last Modified

November 27, 2024

🔗 CVE IDs covered (1)

CVE-2024-52787 →

📋 Description

An issue in the upload_documents method of libre-chat v0.0.6 allows attackers to execute a path traversal via supplying a crafted filename in an uploaded file.

🎯 Affected products1

pip/libre-chat:<= 0.0.6

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2024-52787
https://github.com/vemonet/libre-chat/issues/10
https://github.com/vemonet/libre-chat/pull/9
https://github.com/vemonet/libre-chat/commit/dbb8e3400e5258112179783d74c9cc54310cb72b
https://gist.github.com/jxfzzzt/276a6e8cfbc54d2c2711bb51d8d3dff3
https://github.com/advisories/GHSA-3864-rp2m-2qfj