open-webui up to 0.3.8 on Windows download_model path traversal 🚫 [False Positive]

Noticeinfo

⚠️ It seems this issue is a false-positive. Please confirm the sources provided and consider disregarding this entry.

Productinfo

Name

• open-webui

Version

• 0.3.0
• 0.3.1
• 0.3.2
• 0.3.3
• 0.3.4
• 0.3.5
• 0.3.6
• 0.3.7
• 0.3.8

Timelineinfo

07/23/2024 🔍
03/20/2025 +240 days 🔍
03/20/2025 +0 days 🔍
07/16/2026 +483 days 🔍

Sourcesinfo

Advisory: huntr.com
False Positive: Yes

CVE: CVE-2024-7033 (🔍)
GCVE (CVE): GCVE-0-2024-7033
GCVE (VulDB): GCVE-100-300243

Entryinfo

Created: 03/20/2025 13:10
Updated: 07/16/2026 22:18
Changes: 03/20/2025 13:10 (61), 07/29/2025 20:22 (12), 07/16/2026 22:18 (3)
Complete: 🔍
Cache ID: 216::103

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!