qdrant/qdrant vulnerabilities
3 known vulnerabilities in qdrant/qdrant from Qdrant. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
qdrant/qdrant: Improper Link Resolution Before File Access
qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink
- 7.5 High severity
qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input…
qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint. By manipulating the `name` parameter through URL encoding, an attacker can upload a file to an arbitrary lo
- 9.8 Critical severity
qdrant/qdrant: Improper Limitation of a Pathname to a Restricted Directory
qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/{COLLECTION}/snapshots/upload` endpoint, specifically through the `snapshot` parameter. This vulnerability allows attackers to upload and overwrite an