CVE-2024-9612: onyx — Exploit

Description

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end does not verify the visibility status of the search page. Consequently, attackers can directly call the API to access the functionalities provided by the search page, bypassing the visibility restriction set by the administrator.

Is your site exposed to CVE-2024-9612?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness Type (CWE)

CWE-1100 CWE-1100

Affected Products

Vendor	Product	Versions
onyx	onyx	All

References

Exploits

https://huntr.com/bounties/c1046fa0-a719-475e-ba62-2b97873fbac4 https://huntr.com/bounties/c1046fa0-a719-475e-ba62-2b97873fbac4

Frequently Asked Questions

What is CVE-2024-9612? +

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end does not verify the visibility status of the search page. Consequently, attackers can directly call the API to access the functionalities provided by the search page, bypassing the visibility restriction set by the administrator. It has a CVSS v3.1 base score of 6.5 (MEDIUM).

How severe is CVE-2024-9612? +

CVE-2024-9612 has a CVSS v3.1 score of 6.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-9612? +

CVE-2024-9612 affects products from onyx, specifically: onyx. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-9612? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-3466 7.2

langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with …

CVE-2024-7767 8.1

An improper access control vulnerability exists in danswer-ai/danswer version v0.3.94. This vulnerability allows the first user created in the system …

CVE-2026-42277 6.5

Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated …

CVE-2025-7894 6.3

A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1. This issue affects the function …

CVE-2025-51479 5.4

Authorization bypass in update_user_group in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows remote authenticated attackers to modify arbitrary user groups via …

CVE-2026-42276 4.3

Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated …

CVE-2024-9612