cve/2024/CVE-2024-39722.md

CVE-2024-39722

Description

An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in the api/push route.

POC

Reference

• https://www.oligo.security/blog/more-models-more-probllms

Github

• https://github.com/J1ezds/Vulnerability-Wiki-page
• https://github.com/Threekiii/Awesome-POC
• https://github.com/dansarmiento/ollama_sql_runner
• https://github.com/plzheheplztrying/cve_monitor
• https://github.com/srcx404/CVE-2024-39722
• https://github.com/wowtalon/LLM-Security