Advisories · Technology

danswer-ai/danswer.

Every CVE that names danswer-ai/danswer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-7767 CVE record

CVSS 6.5 Medium

Improper Access Control in danswer-ai/danswer
- danswer-ai/danswer
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-9612 CVE record

CVSS 6.5 Medium

Unauthorized Access in danswer-ai/danswer
- danswer-ai/danswer
- CWE-1100
Not analysed yet 20 Mar 2025
CVE-2024-8057 CVE record

CVSS 4.3 Medium

Improper Access Control in danswer-ai/danswer
- danswer-ai/danswer
- Authentication bypass
Not analysed yet 20 Mar 2025
CVE-2024-9617 CVE record

CVSS 6.5 Medium

IDOR in danswer-ai/danswer
- danswer-ai/danswer
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-7957 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Arbitrary File Overwrite in danswer-ai/danswer
- danswer-ai/danswer
- CWE-29
Not analysed yet 20 Mar 2025
CVE-2024-8065 CVE record

CVSS 8.1 High

CSRF in danswer-ai/danswer
- danswer-ai/danswer
- Cross-site request forgery (CSRF)
Not analysed yet 20 Mar 2025
CVE-2025-0182 CVE record

CVSS 7.5 High

Denial of Service in danswer-ai/danswer
- danswer-ai/danswer
- Denial of service
Not analysed yet 20 Mar 2025
CVE-2024-8028 CVE record

CVSS 7.5 High

Denial of Service in danswer-ai/danswer
- danswer-ai/danswer
- Denial of service
Not analysed yet 20 Mar 2025
CVE-2024-7819 CVE record

CVSS 7.4 High

CORS Misconfiguration in danswer-ai/danswer
- danswer-ai/danswer
- CWE-346
Not analysed yet 20 Mar 2025
CVE-2024-7779 CVE record

CVSS 7.5 High

ReDoS (Regular Expression Denial of Service) in danswer-ai/danswer
- danswer-ai/danswer
- Denial of service
Not analysed yet 20 Mar 2025