CVE-2024-7957

{"id": "CVE-2024-7957", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2025-03-20T10:15:38.130", "references": [{"url": "https://huntr.com/bounties/21e9b909-036c-4544-ad35-6a5117836275", "source": "security@huntr.dev"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-29"}]}], "descriptions": [{"lang": "en", "value": "An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerability arises from the load_credentials method, where user-controlled input for realm_name and zuliprc_content is used to construct file paths and write file contents. This allows attackers to overwrite or create arbitrary files if a zuliprc- directory already exists in the temporary directory."}, {"lang": "es", "value": "Existe una vulnerabilidad de sobrescritura de archivos arbitrarios en ZulipConnector de danswer-ai/danswer, que afecta a la \u00faltima versi\u00f3n. La vulnerabilidad surge del m\u00e9todo load_credentials, donde se utiliza la entrada controlada por el usuario para realm_name y zuliprc_content para construir rutas de archivos y escribir su contenido. Esto permite a los atacantes sobrescribir o crear archivos arbitrarios si ya existe un directorio zuliprc- en el directorio temporal."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "security@huntr.dev"}