Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| stangirard | stangirard/quivr | affected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-6981 | A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request. |
Tue, 15 Jul 2025 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Quivr
Quivr quivr |
|
| CPEs | cpe:2.3:a:quivr:quivr:0.0.254:*:*:*:*:*:*:* | |
| Vendors & Products |
Quivr
Quivr quivr |
Thu, 20 Mar 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 20 Mar 2025 10:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request. | |
| Title | Path Traversal in stangirard/quivr | |
| Weaknesses | CWE-23 | |
| References |
| |
| Metrics |
cvssV3_0
|
MITRE
Status: PUBLISHED
Assigner: @huntr_ai
Published:
Updated: 2025-03-20T18:22:17.747Z
Reserved: 2024-07-08T20:55:27.506Z
Link: CVE-2024-6583
Vulnrichment
Updated: 2025-03-20T17:48:54.025Z
NVD
Status : Analyzed
Published: 2025-03-20T10:15:33.107
Modified: 2025-07-15T15:55:29.110
Link: CVE-2024-6583
Redhat
No data.
OpenCVE Enrichment
No data.