CVE-2024-7819

Status: DeferredHigh (7.4)—

A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive information such as chat contents, API keys, and other data. This vulnerability occurs due to improper validation of the origin header, enabling malicious web pages to make unauthorized requests to the application's API.

CVSS

Version: 3.0
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Base score: 7.4

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.28%
Percentile among all scored CVEs: 18
Score date: 10/5/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1189 Drive-by Compromiseinitial access85 %
Primary impactT1005 Data from Local Systemcollection80 %
Secondary impactT1552 Unsecured Credentialscredential access75 %

XSS vía CORS (CWE-346) en navegador web requiere interacción del usuario (UI:R). Impactos: robo de contenido de chat (T1005) y credenciales/API keys (T1552) por falta de validación del origin header.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

🛡️ ATT&CK mitigations that cover these techniques

User Training Update Software Active Directory Configuration Restrict Web-Based Content Restrict File and Directory Permissions Privileged Account Management

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Danswer-ai — Danswer^AI

CWEs

CWE-346

References

https://huntr.com/bounties/06a21857-e13f-4cf4-aa67-de11419a98c0

Raw JSON (NVD)

Show

{
  "id": "CVE-2024-7819",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-7819",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-20T17:51:52.560947Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security@huntr.dev",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 7.4,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@huntr.dev",
      "affectedData": [
        {
          "vendor": "danswer-ai",
          "product": "danswer-ai/danswer",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "latest"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-03-20T10:15:38.017",
  "references": [
    {
      "url": "https://huntr.com/bounties/06a21857-e13f-4cf4-aa67-de11419a98c0",
      "source": "security@huntr.dev"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@huntr.dev",
      "description": [
        {
          "lang": "en",
          "value": "CWE-346"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive information such as chat contents, API keys, and other data. This vulnerability occurs due to improper validation of the origin header, enabling malicious web pages to make unauthorized requests to the application's API."
    },
    {
      "lang": "es",
      "value": "Una configuración incorrecta de CORS en danswer-ai/danswer v1.4.1 permite a los atacantes robar información confidencial, como el contenido del chat, las claves de API y otros datos. Esta vulnerabilidad se produce debido a una validación incorrecta del encabezado de origen, lo que permite que páginas web maliciosas realicen solicitudes no autorizadas a la API de la aplicación."
    }
  ],
  "lastModified": "2026-06-17T08:20:58.640",
  "sourceIdentifier": "security@huntr.dev"
}