Lucene search

@huntr_aiCVELIST:CVE-2024-6229

HistoryJul 07, 2024 - 3:22 p.m.

CVE-2024-6229 Stored XSS in stangirard/quivr

2024-07-0715:22:38

CWE-79

@huntr_ai

www.cve.org

xss vulnerability

stored xss

stangirard/quivr

upload knowledge

malicious javascript payloads

data theft

session hijacking

reputation damage

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

EPSS

Percentile

14.3%

JSON

A stored cross-site scripting (XSS) vulnerability exists in the ‘Upload Knowledge’ feature of stangirard/quivr, affecting the latest version. Users can upload files via URL, which allows the insertion of malicious JavaScript payloads. These payloads are stored on the server and executed whenever any user clicks on a link containing the payload, leading to potential data theft, session hijacking, and reputation damage.

CNA Affected

[
  {
    "vendor": "stangirard",
    "product": "stangirard/quivr",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

References

huntr.com/bounties/2ee71e9e-2cf5-41a4-8440-d75758018786

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

EPSS

Percentile

14.3%

JSON

Related for CVELIST:CVE-2024-6229