GitHub Advisoryadvisory · crates.io

GHSA-xcr2-h8hv-6227 qdrant is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint

CRITICAL Published 2024-06-02 Modified 2025-07-10 Official page ↗
Aliases
CVE-2024-3584
Ecosystem
crates.io
Packages
qdrant
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Reviewed
2024-06-02

Affected packages

• crates.io qdrant: >= 1.9.0-dev, < 1.9.0 → fixed in 1.9.0

Description

qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint. By manipulating the `name` parameter through URL encoding, an attacker can upload a file to an arbitrary location on the system, such as `/root/poc.txt`. This vulnerability allows for the writing and overwriting of arbitrary files on the server, potentially leading to a full takeover of the system. The issue is fixed in version 1.9.0.

Related

Alias · CVE (1)

  • CVE-2024-3584 qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References