CVE-2024-3584

CVE-2024-3584 is a path traversal vulnerability affecting qdrant/qdrant versions prior to 1.9.0. An attacker can exploit improper input validation in the /collections/{name}/snapshots/upload endpoint to upload and overwrite arbitrary files on the system, potentially leading to full system compromise. This vulnerability is rated High severity (CVSS 7.5) due to its network-based attack vector, low attack complexity, and high impact on integrity. It requires no user interaction or privileges, making it easily exploitable. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered community attention with one mention and one media article, indicating awareness within the cybersecurity community.