Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2024-6707

Disclosure Date: August 07, 2024 (last updated August 09, 2024)
Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.
Attacker Value
Unknown

CVE-2024-6706

Disclosure Date: August 07, 2024 (last updated August 09, 2024)
Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the context of the web page.