Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Khoj has an IDOR in Notion OAuth Flow Enables Index Poisoning
Vulnerability Description
Khoj is a self-hostable artificial intelligence app. Prior to 2.0.0-beta.23, an IDOR in the Notion OAuth callback allows an attacker to hijack any user's Notion integration by manipulating the state parameter. The callback endpoint accepts any user UUID without verifying the OAuth flow was initiated by that user, allowing attackers to replace victims' Notion configurations with their own, resulting in data poisoning and unauthorized access to the victim's Khoj search index. This attack requires knowing the user's UUID which can be leaked through shared conversations where an AI generated image is present. This vulnerability is fixed in 2.0.0-beta.23.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
Khoj 安全漏洞
Vulnerability Description
Khoj是Khoj AI开源的一款应用程序。可为用户创建随时可用的个人人工智能代理。 Khoj 2.0.0-beta.23之前版本存在安全漏洞，该漏洞源于Notion OAuth回调中存在不安全的直接对象引用，可能导致账户接管和数据投毒。
CVSS Information
N/A
Vulnerability Type
N/A