Back

CVE-2024-3829

June 3, 2024, 2:46 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

qdrant/qdrant

  • 1.9.0-dev

Source

security@huntr.dev

Tags

CWE-20
security@huntr.dev
2024-06-03
CVE-2024-3829

CVE-2024-3829 details

Published : June 3, 2024, 10:15 a.m.
Last Modified : June 3, 2024, 2:46 p.m.

Description

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the filesystem and arbitrary file write by including a symlink and a payload file in the snapshot's directory structure. This vulnerability allows for the reading and writing of arbitrary files on the server, which could potentially lead to a full takeover of the system. The issue is fixed in version v1.9.0.

CVSS Score

1 2 3 4 5 6 7 8 9.8 10

Weakness

Weakness Name Description

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

9.8

Exploitability Score

Impact Score

Base Severity

CRITICAL

Vector String : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

URL Source
https://github.com/qdrant/qdrant/commit/ee7a31ec3459a6a4219200234615c1817ab82260 security@huntr.dev
https://huntr.com/bounties/abd9c906-75ee-4d84-b76d-ce1386401e08 security@huntr.dev
This website uses the NVD API, but is not approved or certified by it.