Vulnerabilidades en danswer-ai

11 resultados

Análisis Vexday

Danswer-ai apresenta 11 vulnerabilidades catalogadas, com 2 classificadas como críticas, mas nenhuma sob exploração ativa conhecida. A ausência de divulgações recentes sugere que o ecossistema de segurança não está em alerta imediato, embora a fraqueza dominante (CWE-770 - alocação excessiva de recursos) indique potencial para ataques de negação de serviço que merece remediação planejada.

CVE-2024-9617MEDIUMIDOR in danswer-ai/danswerEPSS 1.6%CVE-2024-7957CRITICALArbitrary File Overwrite in danswer-ai/danswerEPSS 0.9%CVE-2024-32881CRITICALUnauthorized access to GET/SET of Slack Bot Tokens in DanswerEPSS 0.8%CVE-2024-9612MEDIUMUnauthorized Access in danswer-ai/danswerEPSS 0.7%CVE-2024-7779HIGHReDoS (Regular Expression Denial of Service) in danswer-ai/danswerEPSS 0.7%CVE-2025-0182HIGHDenial of Service in danswer-ai/danswerEPSS 0.7%CVE-2024-7767MEDIUMImproper Access Control in danswer-ai/danswerEPSS 0.6%CVE-2024-8028HIGHDenial of Service in danswer-ai/danswerEPSS 0.5%CVE-2024-8057MEDIUMImproper Access Control in danswer-ai/danswerEPSS 0.4%CVE-2024-7819HIGHCORS Misconfiguration in danswer-ai/danswerEPSS 0.3%CVE-2024-8065HIGHCSRF in danswer-ai/danswerEPSS 0.2%