Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SSRF Vulnerability in stangirard/quivr
Vulnerability Description
A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs, thereby facilitating SSRF attacks. The affected code is located in the backend/routes/crawl_routes.py file, specifically within the crawl_endpoint function. This issue could allow attackers to interact with internal services that are accessible from the server hosting the application.
CVSS Information
N/A
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
Quivr 代码问题漏洞
Vulnerability Description
Quivr是Quivr开源的一个人工智能应用程序。 Quivr 存在代码问题漏洞，该漏洞源于 crawl_endpoint 函数中存在服务器端请求伪造漏洞。
CVSS Information
N/A
Vulnerability Type
N/A