Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:anil-Matcha:open-Generative-Ai:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Unrestricted File Upload Vulnerability in Anil-matcha Open-Generative-AI

Anil-matcha Open-Generative-AI is vulnerable to unrestricted file uploads via the /api/upload-binary endpoint, allowing remote attackers to manipulate the x-proxy-target-url argument to upload arbitrary files.

Open-Generative-AI vulnerability remote-code-execution web-application-security
1r 1c