POC Details: 6e8ee4ac21c42f1331e44bae3ed46a1d1bb3fc97

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/apis/chroma-api-exposure.yaml

Associated Vulnerability

Likely 0-day

Description

ChromaDB runs without authentication by default, exposing the API edpoint to anyone and allowing unauthorized access to read.

File Snapshot


 id: chroma-api-exposure

info:
  name: ChromaDB - Unauthenticated API Exposure
  author: pussycat0x


...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.