Skip to main content

Lollms Web Ui CVE-2024-6394

HIGH
Path Traversal: '\\..\\filename' (CWE-29)
2024-09-30 security@huntr.dev
7.5
CVSS 3.0 · Vendor: huntr
Share

Severity by source

Vendor (huntr) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (huntr) · only source for this CVE.

CVSS VectorVendor: huntr

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Sep 30, 2024 - 08:15 cve.org
HIGH 7.5

DescriptionCVE.org

A Local File Inclusion vulnerability exists in parisneo/lollms-webui versions below v9.8. The vulnerability is due to unverified path concatenation in the serve_js function in app.py, which allows attackers to perform path traversal attacks. This can lead to unauthorized access to arbitrary files on the server, potentially exposing sensitive information such as private SSH keys, configuration files, and source code.

AnalysisAI

A Local File Inclusion vulnerability exists in parisneo/lollms-webui versions below v9.8. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-29. A Local File Inclusion vulnerability exists in parisneo/lollms-webui versions below v9.8. The vulnerability is due to unverified path concatenation in the serve_js function in app.py, which allows attackers to perform path traversal attacks. This can lead to unauthorized access to arbitrary files on the server, potentially exposing sensitive information such as private SSH keys, configuration files, and source code. Affected products include: Lollms Lollms Web Ui.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2024-8898 CRITICAL POC
9.8 Mar 20

A path traversal vulnerability exists in the `install` and `uninstall` API endpoints of parisneo/lollms-webui version V1

CVE-2024-4320 CRITICAL POC
9.8 Jun 06

A remote code execution (RCE) vulnerability exists in the '/install_extension' endpoint of the parisneo/lollms-webui app

CVE-2024-3322 CRITICAL POC
9.8 Jun 06

A path traversal vulnerability exists in the 'cyber_security/codeguard' native personality of the parisneo/lollms-webui,

CVE-2024-2624 CRITICAL POC
9.8 Jun 06

A path traversal and arbitrary file upload vulnerability exists in the parisneo/lollms-webui application, specifically w

CVE-2024-2360 CRITICAL POC
9.8 Jun 06

parisneo/lollms-webui is vulnerable to path traversal attacks that can lead to remote code execution due to insufficient

CVE-2024-2359 CRITICAL POC
9.8 Jun 06

A vulnerability in the parisneo/lollms-webui version 9.3 allows attackers to bypass intended access restrictions and exe

CVE-2024-5482 CRITICAL POC
9.8 Jun 06

A Server-Side Request Forgery (SSRF) vulnerability exists in the 'add_webpage' endpoint of the parisneo/lollms-webui app

CVE-2024-4326 CRITICAL POC
9.8 May 16

A vulnerability in parisneo/lollms-webui versions up to 9.3 allows remote attackers to execute arbitrary code. Rated cri

CVE-2024-2358 CRITICAL POC
9.8 May 16

A path traversal vulnerability in the '/apply_settings' endpoint of parisneo/lollms-webui allows attackers to execute ar

CVE-2024-1520 CRITICAL POC
9.8 Apr 10

An OS Command Injection vulnerability exists in the '/open_code_folder' endpoint of the parisneo/lollms-webui applicatio

CVE-2024-1511 CRITICAL POC
9.8 Apr 10

The parisneo/lollms-webui repository is susceptible to a path traversal vulnerability due to inadequate validation of us

CVE-2024-2361 CRITICAL POC
9.6 May 16

A vulnerability in the parisneo/lollms-webui allows for arbitrary file upload and read due to insufficient sanitization

Share

CVE-2024-6394 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy