Read Time:21 Second
Posted by KoreLogic Disclosures via Fulldisclosure on Aug 07
KL-001-2024-006: Open WebUI Arbitrary File Upload + Path Traversal
Title: Open WebUI Arbitrary File Upload + Path Traversal
Advisory ID: KL-001-2024-006
Publication Date: 2024.08.D06
Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-006.txt
1. Vulnerability Details
Affected Vendor: Open WebUI
Affected Product: Open WebUI
Affected Version: 0.1.105
Platform: Debian 12
CWE…