CVE-2024-39722: Path Traversal
Published Oct 31, 2024
·Updated
An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in the api/push route.
Affected Software
2 affected components
Ollama Ollama<0.1.46
Ollama Ollama<0.1.46
Event History
Oct 31, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-39722?
CVE-2024-39722 is considered to have a moderate severity due to the potential exposure of sensitive file paths.
2
How do I fix CVE-2024-39722?
To fix CVE-2024-39722, upgrade Ollama to version 0.1.46 or later.
3
What does CVE-2024-39722 affect?
CVE-2024-39722 affects Ollama versions prior to 0.1.46.
4
What kind of information can be leaked due to CVE-2024-39722?
CVE-2024-39722 can lead to leakage of file paths that exist on the server.
5
Is CVE-2024-39722 a critical vulnerability?
CVE-2024-39722 is not classified as critical but poses risks if sensitive files are exposed.