fossasia/susi_server

fossasia/susi_server

GitHubGitHub
GitHubgithub.com
Releases1
Frequency
Last Release
Stars2.53K
SUSI.AI server backend - the Artificial Intelligence server for personal assistants https://susi.ai
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-4039↗
8.6 HIGH6.4 MEDIUM

SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient input validation. Any admin config and file readable by the app can be retrieved by the attacker. Furthermore, some files can also be moved or deleted.