| 제목 | chatchat-space Langchain-Chatchat < v0.3.1 Path Traversal: '.../...//' |
|---|
| 설명 | There is a path traversal vulnerability when the /v1/file of the Langchain-Chatchat backend handles POST requests. An attacker can send malicious requests to this endpoint through the network to achieve path traversal and write arbitrary files. |
|---|
| 원천 | ⚠️ https://github.com/chatchat-space/Langchain-Chatchat/issues/5354 |
|---|
| 사용자 | Anonymous User |
|---|
| 제출 | 2025. 06. 20. AM 09:20 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 06. 28. PM 12:38 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 314327 [chatchat-space Langchain-Chatchat 까지 0.3.1 /v1/file flag 디렉토리 순회] |
|---|
| 포인트들 | 16 |
|---|