Loading vulnerability details…
CVSS v3.1
N/A
EPSS
0.56%
Published
Mar 20, 2025
Modified
Jul 15, 2025
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.
Weaknesses (CWE)
Affected Products (1)
References (1)