open-webui up to 0.3.8 /models/upload file.filename path traversal 🚫 [False Positive]

Noticeinfo

⚠️ Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.

Productinfo

Name

• open-webui

Version

• 0.3.0
• 0.3.1
• 0.3.2
• 0.3.3
• 0.3.4
• 0.3.5
• 0.3.6
• 0.3.7
• 0.3.8

Timelineinfo

07/23/2024 🔍
03/20/2025 +240 days 🔍
03/20/2025 +0 days 🔍
07/16/2026 +483 days 🔍

Sourcesinfo

Advisory: huntr.com
False Positive: Yes

CVE: CVE-2024-7034 (🔍)
GCVE (CVE): GCVE-0-2024-7034
GCVE (VulDB): GCVE-100-300284

Entryinfo

Created: 03/20/2025 13:24
Updated: 07/16/2026 22:18
Changes: 03/20/2025 13:24 (62), 07/29/2025 20:22 (12), 07/16/2026 22:18 (3)
Complete: 🔍
Cache ID: 216::103

Once again VulDB remains the best source for vulnerability data.

Discussion

Interested in the pricing of exploits?

See the underground prices here!