PT-2024-33128 · Unknown · Stangirard/Quivr

Published 2024-06-06 · Updated 2024-10-17 · CVE-2024-4851

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions stangirard/quivr version 0.0.204

Description A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, which allows attackers to access internal networks. The vulnerability is present in the "crawl endpoint" where the url parameter can be manipulated to send HTTP requests to arbitrary URLs, thereby facilitating SSRF attacks. The affected code is located in the backend/routes/crawl routes.py file, specifically within the crawl endpoint function. This issue could allow attackers to interact with internal services that are accessible from the server hosting the application.

Recommendations For version 0.0.204, as a temporary workaround, consider disabling the crawl endpoint function until a patch is available. Restrict access to the crawl endpoint to minimize the risk of exploitation. Avoid using the url parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-4851

Affected Products

Stangirard/Quivr

References · 6

• 🔥 https://huntr.com/bounties/b6011986-954a-47da-a60c-fc7aebc8005d · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-4851 · Security Note
• https://osv.dev/vulnerability/CVE-2024-4851 · Vendor Advisory
• https://twitter.com/CVEnew/status/1798789764247884134 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1798815963124473863 · Twitter Post
• https://t.me/cvenotify/98612 · Telegram Post