CVE Database
/

CVE-2024-6707

Back to search

CVE-2024-6707

Published: Aug 7, 2024

Modified: Aug 8, 2024

PUBLISHED

Description

Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.

VendorProductVersions

Open WebUI

Open WebUI

affected
0.1.105

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now