An issue in mmzdev KnowledgeGPT V.0.0.5 allows a remote attacker to execute arbitrary code via the Document Display Component.
References
Link | Resource |
---|---|
https://github.com/mmz-001/knowledge_gpt/blob/main/knowledge_gpt/main.py | Product |
https://medium.com/@cnetsec/vulnerability-identified-in-knowledgegpt-version-0-0-5-5168ec081842 | Third Party Advisory |
Configurations
History
09 Jul 2025, 19:07
Type | Values Removed | Values Added |
---|---|---|
First Time |
Mmz-001
Mmz-001 knowledgegpt |
|
CPE | cpe:2.3:a:mmz-001:knowledgegpt:0.0.5:*:*:*:*:*:*:* | |
References | () https://github.com/mmz-001/knowledge_gpt/blob/main/knowledge_gpt/main.py - Product | |
References | () https://medium.com/@cnetsec/vulnerability-identified-in-knowledgegpt-version-0-0-5-5168ec081842 - Third Party Advisory |
26 Jun 2025, 18:58
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
24 Jun 2025, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-06-24 20:15
Updated : 2025-07-09 19:07
NVD link : CVE-2024-37743
Mitre link : CVE-2024-37743
CVE.ORG link : CVE-2024-37743
JSON object : View
Products Affected
mmz-001
- knowledgegpt
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')