Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1020 CNY

100%
Buy Us a Coffee

CVE-2024-39722 PoC — Ollama 安全漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/%E4%BA%BA%E5%B7%A5%E6%99%BA%E8%83%BD%E6%BC%8F%E6%B4%9E/Ollama%20%E6%96%87%E4%BB%B6%E5%AD%98%E5%9C%A8%E6%80%A7%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E%20CVE-2024-39722.md
Associated Vulnerability
Title:Ollama 安全漏洞 (CVE-2024-39722)
Description:An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in the api/push route.
File Snapshot

 # Ollama 文件存在性泄露漏洞 CVE-2024-39722

## 漏洞描述

Ollama 0.1.45 及之前的版本中，攻击者可以通过 `api/push` 端点的路径遍历暴露服务器上存在

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →