crates.io/qdrant CVE-2024-3584: critical 9.8, EPSS 0.55%
qdrant is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint
Action: Upgrade qdrant to 1.9.0 or later.
cargo update -p qdrant --precise 1.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.0-dev | 1.9.0 | - |
Fixed versions
| 1.9.0 |
Sources
- osv: GHSA-xcr2-h8hv-6227
- https://nvd.nist.gov/vuln/detail/CVE-2024-3584
- https://github.com/qdrant/qdrant/commit/15479a45ffa3b955485ae516696f7e933a8cce8a
- https://github.com/qdrant/qdrant
- https://huntr.com/bounties/5c7c82e2-4873-40b7-a5f3-0f4a42642f73
CVE-2024-3584 · published · modified · JSON