Approved changes feed: RSS · Atom
cpe:2.3:a:stangirard:quivr:0.0.259:*:*:*:*:*:*:*part: a version: 0.0.259 update: *
| Vendor | Stangirard (a53f267c-4b9d-5196-8ba3-6e40c9ea5afb) |
|---|---|
| Product | Quivr (c7467a4a-ce44-5b29-830f-1ba48246b16f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6229 |
vulnerable | 2026-06-08 06:58:18.298169 |
Stored XSS in stangirard/quivr
MEDIUM (6.8)
A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version. Users can upload files via URL, which allows the insertion of malicious JavaScript payloads. These payloads are stored on the server and executed whenever any user clicks on a link containing the payload, leading to potential data theft, session hijacking, and reputation damage.
Published: 2024-07-07T15:22:38.743Z
Updated: 2024-08-01T21:33:05.163Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.