CVE-2024-2360: fallo crítico en parisneo/lollms-webui
Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.8epss 1.9%
parisneo/lollms-webui is vulnerable to path traversal attacks that can lead to remote code execution due to insufficient sanitization of user-supplied input in the 'Database path' and 'PDF LaTeX path' settings. An attacker can exploit this vulnerability by manipulating these settings to execute arbitrary code on the targeted server. The issue affects the latest version of the software. The vulnerability stems from the application's handling of the 'discussion_db_name' and 'pdf_latex_path' parameters, which do not properly validate file paths, allowing for directory traversal. This vulnerability can also lead to further file exposure and other attack vectors by manipulating the 'discussion_db_name' parameter.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
parisneo · parisneo/lollms-webuiCVEs relacionadas — parisneo/lollms-webui
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-1520CRITICALOS Command Injection in parisneo/lollms-webuiEPSS 48.2%CVE-2024-1601HIGHSQL Injection in parisneo/lollms-webuiEPSS 40.4%CVE-2024-4320CRITICALRemote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webuiEPSS 34.4%CVE-2024-1600CRITICALLocal File Inclusion in parisneo/lollms-webuiEPSS 32.5%CVE-2024-4322HIGHPath Traversal in parisneo/lollms-webuiEPSS 30.8%CVE-2024-1873HIGHPath Traversal and Denial of Service in parisneo/lollms-webuiEPSS 13.4%