high8.8
CVE-2024-6707
Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.
Impact
Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openwebui | Open Webui | Version 0.1.105 |