CVE-2024-4851: SSRF Vulnerability in stangirard/quivr

Published Jun 6, 2024

Updated

A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs, thereby facilitating SSRF attacks. The affected code is located in the backend/routes/crawlroutes.py file, specifically within the crawlendpoint function. This issue could allow attackers to interact with internal services that are accessible from the server hosting the application.

Affected Software

1 affected component

quivr quivr=0.0.204

Event History

Jun 6, 2024

CVE Published

via MITRE·06:39 PM

Data Sourced

via MITRE·06:39 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-4851?

CVE-2024-4851 is classified as a high severity Server-Side Request Forgery (SSRF) vulnerability.

How do I fix CVE-2024-4851?

To fix CVE-2024-4851, upgrade the Quivr application to a version newer than 0.0.204 that addresses this SSRF vulnerability.

What impact does CVE-2024-4851 have on my system?

CVE-2024-4851 allows attackers to send unauthorized HTTP requests, potentially accessing sensitive internal network resources.

Which versions of the Quivr application are affected by CVE-2024-4851?

CVE-2024-4851 affects the Quivr application version 0.0.204.

Is CVE-2024-4851 exploitable remotely?

Yes, CVE-2024-4851 can be exploited remotely by manipulating the 'url' parameter in the crawl endpoint.