by Kastro
Paper/Archive/CVE-2024-10361

CVE-2024-10361

danny-avila danny-avila/librechat — Arbitrary File Deletion via Path Traversal in danny-avila/librechat

EPSS 1%public exploitCVSS 9.1
critical.is priorityof 100
50
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 63.2.632 × 2012.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /api/files endpoint. This vulnerability arises from improper input validation, allowing path traversal techniques to delete arbitrary files on the server. Attackers can exploit this to bypass security mechanisms and delete files outside the intended directory, including critical system files, user data, or application resources. This vulnerability impacts the integrity and availability of the system.

Affected

ProductAffectedFixed inSource
danny-avila/librechatunspecified – < 0.7.50.7.5CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
@huntr_ai (CNA)8.1CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refhuntr.com/bounties/e811f7f7-9556-4564-82e2-5b3d17599b2drefgithub.com/danny-avila/librechat/commit/0b744db1e2af31a531ffb761584d85540430639c