Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Weaviate OSS before 1.33.4. Due to a lack of validation of the fileName field in the transfer logic, an attacker who can call the GetFile method while a shard is in the "Pause file activity" state and the FileReplicationService is reachable can read arbitrary files accessible to the service process.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Weaviate 安全漏洞
Vulnerability Description
Weaviate是Weaviate开源的一个开源矢量数据库。 Weaviate 1.33.4之前版本存在安全漏洞，该漏洞源于传输逻辑中未验证fileName字段，可能导致读取服务进程可访问的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A