Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: stangirard Component: Quivr Clear all filters
TI-2024-06105 CVE-2024-6583 · GHSA-332g-rf22-2vcg

Path Traversal in stangirard/quivr

Priority MEDIUM 53

A path traversal vulnerability exists in the latest version of stangirard/quivr.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00607 Published 2025-03-20 No fix listed CWE-23
TI-2024-05777 CVE-2024-6229 · GHSA-2xp5-vm5f-w77m

Stored XSS in stangirard/quivr

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00341 Published 2024-07-07 No fix listed CWE-79
TI-2024-04512 CVE-2024-4851 · GHSA-rcfg-x28g-p9m3

SSRF Vulnerability in stangirard/quivr

Priority HIGH 69

A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00576 Published 2024-06-06 No fix listed CWE-918