{"data":{"id":"1d19ab94-04c3-4936-9ed7-306094d9a250","title":"CVE-2024-3078: A vulnerability was found in Qdrant up to 1.6.1/1.7.4/1.8.2 and classified as critical. This issue affects some unknown…","summary":"CVE-2024-3078 is a critical path traversal flaw in Qdrant versions up to 1.6.1, 1.7.4 and 1.8.2. It sits in the processing of lib/collection/src/collection/snapshots.rs within the Full Snapshot REST API, where manipulated input leads to the traversal.","solution":"Upgrade to version 1.8.3, which addresses the issue. The patch is named 3ab5172e9c8f14fa1f7b24e7147eac74e2412b62. The source recommends upgrading the affected component.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-3078","publishedAt":"2024-03-29T17:15:16.477Z","cveId":"CVE-2024-3078","cweIds":["CWE-22"],"cvssScore":"5.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Qdrant"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Qdrant path traversal in Full Snapshot REST API","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00874,"epssCheckedAt":"2026-11-04T18:09:14.876Z","kevDateAdded":null,"advisoryAliases":["GHSA-5gxc-9wh2-99f9"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T06:09:50.839Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}