An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in the api/push route.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.oligo.security/blog/more-models-more-probllms | Exploit Third Party Advisory |
Configurations
History
13 May 2025, 14:24
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ollama ollama
Ollama |
|
| References | () https://www.oligo.security/blog/more-models-more-probllms - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:ollama:ollama:*:*:*:*:*:*:*:* |
01 Nov 2024, 15:35
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
31 Oct 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-31 20:15
Updated : 2025-05-13 14:24
NVD link : CVE-2024-39722
Mitre link : CVE-2024-39722
JSON object : View
Products Affected
ollama
- ollama
CWE
No CWE.