GitHub Advisoryadvisory · PyPI

GHSA-54f4-v6v9-9q82 open-webui allows writing and deleting arbitrary files

MEDIUM Published 2024-10-09 Modified 2024-10-09 Official page ↗
Aliases
CVE-2024-7037
Ecosystem
PyPI
Packages
open-webui
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-22
Reviewed
2024-10-09

Affected packages

• PyPI open-webui: <= 0.3.8 (no fix yet)

Description

In version v0.3.8 of open-webui/open-webui, the endpoint /api/pipelines/upload is vulnerable to arbitrary file write and delete due to unsanitized file.filename concatenation with CACHE_DIR. This vulnerability allows attackers to overwrite and delete system files, potentially leading to remote code execution.

Related

Alias · not in database (1)

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References