漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Arbitrary File Deletion in BerriAI/litellm
Vulnerability Description
BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the `/audio/transcriptions` endpoint. An attacker can exploit this vulnerability by sending a specially crafted request that includes a file path to the server, which then deletes the specified file without proper authorization or validation. This vulnerability is present in the code where `os.remove(file.filename)` is used to delete a file, allowing any user to delete critical files on the server such as SSH keys, SQLite databases, or configuration files.
CVSS Information
N/A
Vulnerability Type
授权机制缺失
Vulnerability Title
LiteLLM 输入验证错误漏洞
Vulnerability Description
LiteLLM是Berri AI开源的一个应用程序。可以使用 OpenAI 格式调用所有 LLM API。 LiteLLM 存在输入验证错误漏洞，该漏洞源于 /audio/transcriptions API 存在输入验证不当问题，导致容易受到任意文件删除的影响。
CVSS Information
N/A
Vulnerability Type
N/A