Quivr 0.0.204
Approved changes feed: RSS · Atom
cpe:2.3:a:quivr:quivr:0.0.204:*:*:*:*:*:*:*part: a version: 0.0.204 update: *
| Vendor | Quivr (4b5cb34e-0222-5ef7-8765-d3364ff38e3b) |
|---|---|
| Product | Quivr (0d97b1e1-7f71-5100-aba1-36b0fbae4449) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/quivrhq/quivr |
purl2cpe | 2026-06-01 10:15:40.311811 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4851 |
vulnerable | 2026-06-08 06:50:18.792660 |
SSRF Vulnerability in stangirard/quivr
HIGH (7.7)
A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs, thereby facilitating SSRF attacks. The affected code is located in the backend/routes/crawl_routes.py file, specifically within the crawl_endpoint function. This issue could allow attackers to interact with internal services that are accessible from the server hosting the application.
Published: 2024-06-06T18:39:58.505Z
Updated: 2024-08-09T19:48:33.486Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.