Ddanswer-ai

Products

Exploited and recent CVEs

• CVE-2024-7767 Medium 6.5 Improper Access Control in danswer-ai/danswer 0.6%
• CVE-2024-9612 Medium 6.5 Unauthorized Access in danswer-ai/danswer 0.7%
• CVE-2024-8057 Medium 4.3 Improper Access Control in danswer-ai/danswer 0.4%
• CVE-2024-9617 Medium 6.5 IDOR in danswer-ai/danswer 1.7%
• CVE-2024-7957 Critical 9.1 Arbitrary File Overwrite in danswer-ai/danswer 1.0%
• CVE-2024-8065 High 8.1 CSRF in danswer-ai/danswer 0.2%
• CVE-2025-0182 High 7.5 Denial of Service in danswer-ai/danswer 0.7%
• CVE-2024-8028 High 7.5 Denial of Service in danswer-ai/danswer 0.5%
• CVE-2024-7819 High 7.4 CORS Misconfiguration in danswer-ai/danswer 0.3%
• CVE-2024-7779 High 7.5 ReDoS (Regular Expression Denial of Service) in danswer-ai/danswer 0.7%
• CVE-2024-32881 Critical 9.8 Unauthorized access to GET/SET of Slack Bot Tokens in Danswer 0.8%