logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2024-7042

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2024-7042

Description:
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.
Last updated date:
10/31/2024
Type:
exploit
Confidence:
HIGH
Date of publishing:
10/31/2024
Reference url to background

https://huntr.com/bounties/b612defb-1104-4fff-9fef-001ab07c7b2d

Vulnerability FeedContributorsAboutBlog

@inTheWild

©2024

Privacy Policy