Vulnerabilities > CVE-2024-6229 - Unspecified vulnerability in Quivr

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

quivr

NVD

Published: 2024-07-07

Updated: 2024-11-21

Summary

A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version. Users can upload files via URL, which allows the insertion of malicious JavaScript payloads. These payloads are stored on the server and executed whenever any user clicks on a link containing the payload, leading to potential data theft, session hijacking, and reputation damage.

Vulnerable Configurations

Part	Description	Count
Application	Quivr Quivr Quivr - Quivr Quivr 0.0.1 Quivr Quivr 0.0.2 Quivr Quivr 0.0.3 Quivr Quivr 0.0.4 Quivr Quivr 0.0.5 Quivr Quivr 0.0.6 Quivr Quivr 0.0.7 Quivr Quivr 0.0.8 Quivr Quivr 0.0.9 Quivr Quivr 0.0.10 Quivr Quivr 0.0.11 Quivr Quivr 0.0.12 Quivr Quivr 0.0.13 Quivr Quivr 0.0.14 Quivr Quivr 0.0.15 Quivr Quivr 0.0.16 Quivr Quivr 0.0.17 Quivr Quivr 0.0.18 Quivr Quivr 0.0.19 Quivr Quivr 0.0.20 Quivr Quivr 0.0.21 Quivr Quivr 0.0.22 Quivr Quivr 0.0.23 Quivr Quivr 0.0.24 Quivr Quivr 0.0.25 Quivr Quivr 0.0.26 Quivr Quivr 0.0.27 Quivr Quivr 0.0.28 Quivr Quivr 0.0.29 Quivr Quivr 0.0.30 Quivr Quivr 0.0.31 Quivr Quivr 0.0.32 Quivr Quivr 0.0.33 Quivr Quivr 0.0.34 Quivr Quivr 0.0.35 Quivr Quivr 0.0.36 Quivr Quivr 0.0.37 Quivr Quivr 0.0.38 Quivr Quivr 0.0.39 Quivr Quivr 0.0.40 Quivr Quivr 0.0.41 Quivr Quivr 0.0.42 Quivr Quivr 0.0.43 Quivr Quivr 0.0.44 Quivr Quivr 0.0.45 Quivr Quivr 0.0.46 Quivr Quivr 0.0.47 Quivr Quivr 0.0.48 Quivr Quivr 0.0.49 Quivr Quivr 0.0.50 Quivr Quivr 0.0.51 Quivr Quivr 0.0.52 Quivr Quivr 0.0.53 Quivr Quivr 0.0.54 Quivr Quivr 0.0.55 Quivr Quivr 0.0.56 Quivr Quivr 0.0.57 Quivr Quivr 0.0.58 Quivr Quivr 0.0.59 Quivr Quivr 0.0.60 Quivr Quivr 0.0.61 Quivr Quivr 0.0.62 Quivr Quivr 0.0.63 Quivr Quivr 0.0.64 Quivr Quivr 0.0.65 Quivr Quivr 0.0.66 Quivr Quivr 0.0.67 Quivr Quivr 0.0.68 Quivr Quivr 0.0.69 Quivr Quivr 0.0.70 Quivr Quivr 0.0.71 Quivr Quivr 0.0.72 Quivr Quivr 0.0.73 Quivr Quivr 0.0.74 Quivr Quivr 0.0.75 Quivr Quivr 0.0.76 Quivr Quivr 0.0.77 Quivr Quivr 0.0.78 Quivr Quivr 0.0.79 Quivr Quivr 0.0.80 Quivr Quivr 0.0.81 Quivr Quivr 0.0.82 Quivr Quivr 0.0.83 Quivr Quivr 0.0.84 Quivr Quivr 0.0.85 Quivr Quivr 0.0.86 Quivr Quivr 0.0.87 Quivr Quivr 0.0.88 Quivr Quivr 0.0.89 Quivr Quivr 0.0.90 Quivr Quivr 0.0.91 Quivr Quivr 0.0.92 Quivr Quivr 0.0.93 Quivr Quivr 0.0.94 Quivr Quivr 0.0.95 Quivr Quivr 0.0.96 Quivr Quivr 0.0.97 Quivr Quivr 0.0.98 Quivr Quivr 0.0.99 Quivr Quivr 0.0.100 Quivr Quivr 0.0.101 Quivr Quivr 0.0.102 Quivr Quivr 0.0.103 Quivr Quivr 0.0.104 Quivr Quivr 0.0.105 Quivr Quivr 0.0.106 Quivr Quivr 0.0.107 Quivr Quivr 0.0.108 Quivr Quivr 0.0.109 Quivr Quivr 0.0.110 Quivr Quivr 0.0.111 Quivr Quivr 0.0.112 Quivr Quivr 0.0.113 Quivr Quivr 0.0.114 Quivr Quivr 0.0.115 Quivr Quivr 0.0.116 Quivr Quivr 0.0.117 Quivr Quivr 0.0.118 Quivr Quivr 0.0.119 Quivr Quivr 0.0.120 Quivr Quivr 0.0.121 Quivr Quivr 0.0.122 Quivr Quivr 0.0.123 Quivr Quivr 0.0.124 Quivr Quivr 0.0.125 Quivr Quivr 0.0.126 Quivr Quivr 0.0.127 Quivr Quivr 0.0.128 Quivr Quivr 0.0.129 Quivr Quivr 0.0.130 Quivr Quivr 0.0.131 Quivr Quivr 0.0.132 Quivr Quivr 0.0.133 Quivr Quivr 0.0.134 Quivr Quivr 0.0.135 Quivr Quivr 0.0.136 Quivr Quivr 0.0.137 Quivr Quivr 0.0.138 Quivr Quivr 0.0.139 Quivr Quivr 0.0.140 Quivr Quivr 0.0.141 Quivr Quivr 0.0.142 Quivr Quivr 0.0.143 Quivr Quivr 0.0.144 Quivr Quivr 0.0.145 Quivr Quivr 0.0.146 Quivr Quivr 0.0.147 Quivr Quivr 0.0.148 Quivr Quivr 0.0.149 Quivr Quivr 0.0.150 Quivr Quivr 0.0.151 Quivr Quivr 0.0.152 Quivr Quivr 0.0.153 Quivr Quivr 0.0.154 Quivr Quivr 0.0.155 Quivr Quivr 0.0.156 Quivr Quivr 0.0.157 Quivr Quivr 0.0.158 Quivr Quivr 0.0.159 Quivr Quivr 0.0.160 Quivr Quivr 0.0.161 Quivr Quivr 0.0.162 Quivr Quivr 0.0.163 Quivr Quivr 0.0.164 Quivr Quivr 0.0.165 Quivr Quivr 0.0.166 Quivr Quivr 0.0.167 Quivr Quivr 0.0.168 Quivr Quivr 0.0.169 Quivr Quivr 0.0.170 Quivr Quivr 0.0.171 Quivr Quivr 0.0.172 Quivr Quivr 0.0.173 Quivr Quivr 0.0.174 Quivr Quivr 0.0.175 Quivr Quivr 0.0.176 Quivr Quivr 0.0.177 Quivr Quivr 0.0.178 Quivr Quivr 0.0.179 Quivr Quivr 0.0.180 Quivr Quivr 0.0.181 Quivr Quivr 0.0.182 Quivr Quivr 0.0.183 Quivr Quivr 0.0.184 Quivr Quivr 0.0.185 Quivr Quivr 0.0.186 Quivr Quivr 0.0.187 Quivr Quivr 0.0.188 Quivr Quivr 0.0.189 Quivr Quivr 0.0.190 Quivr Quivr 0.0.191 Quivr Quivr 0.0.192 Quivr Quivr 0.0.193 Quivr Quivr 0.0.194 Quivr Quivr 0.0.195 Quivr Quivr 0.0.196 Quivr Quivr 0.0.197 Quivr Quivr 0.0.198 Quivr Quivr 0.0.199 Quivr Quivr 0.0.200 Quivr Quivr 0.0.201 Quivr Quivr 0.0.202 Quivr Quivr 0.0.203 Quivr Quivr 0.0.204 Quivr Quivr 0.0.205 Quivr Quivr 0.0.206 Quivr Quivr 0.0.207 Quivr Quivr 0.0.208 Quivr Quivr 0.0.209 Quivr Quivr 0.0.210 Quivr Quivr 0.0.211 Quivr Quivr 0.0.212 Quivr Quivr 0.0.213 Quivr Quivr 0.0.214 Quivr Quivr 0.0.215 Quivr Quivr 0.0.216 Quivr Quivr 0.0.217 Quivr Quivr 0.0.218 Quivr Quivr 0.0.219 Quivr Quivr 0.0.220 Quivr Quivr 0.0.221 Quivr Quivr 0.0.222 Quivr Quivr 0.0.223 Quivr Quivr 0.0.224 Quivr Quivr 0.0.225 Quivr Quivr 0.0.226 Quivr Quivr 0.0.227 Quivr Quivr 0.0.228 Quivr Quivr 0.0.229 Quivr Quivr 0.0.230 Quivr Quivr 0.0.231 Quivr Quivr 0.0.232 Quivr Quivr 0.0.233 Quivr Quivr 0.0.234 Quivr Quivr 0.0.235 Quivr Quivr 0.0.236 Quivr Quivr 0.0.237 Quivr Quivr 0.0.238 Quivr Quivr 0.0.239 Quivr Quivr 0.0.240 Quivr Quivr 0.0.241 Quivr Quivr 0.0.242 Quivr Quivr 0.0.243 Quivr Quivr 0.0.244 Quivr Quivr 0.0.245 Quivr Quivr 0.0.246 Quivr Quivr 0.0.247 Quivr Quivr 0.0.248 Quivr Quivr 0.0.249 Quivr Quivr 0.0.250 Quivr Quivr 0.0.251 Quivr Quivr 0.0.252 Quivr Quivr 0.0.253 Quivr Quivr 0.0.254 Quivr Quivr 0.0.255 Quivr Quivr 0.0.256 Quivr Quivr 0.0.257 Quivr Quivr 0.0.258 Quivr Quivr 0.0.259 Quivr Quivr 0.0.260 Quivr Quivr 0.0.261 Quivr Quivr 0.0.262 Quivr Quivr 0.0.263 Quivr Quivr 0.0.264 Quivr Quivr 0.0.265 Quivr Quivr 0.0.266 Quivr Quivr 0.0.267 Quivr Quivr 0.0.268 Quivr Quivr 0.0.269 Quivr Quivr 0.0.270 Quivr Quivr 0.0.271 Quivr Quivr 0.0.272 Quivr Quivr 0.0.273 Quivr Quivr 0.0.274 Quivr Quivr 0.0.275 Quivr Quivr 0.0.276 Quivr Quivr 0.0.277 Quivr Quivr 0.0.278 Quivr Quivr 0.0.279 Quivr Quivr 0.0.280	281

Summary

Vulnerable Configurations

References