GitStock

parisneo/lollms · Security

LoLLMS vulnerable to Expected Behavior Violation

Open GitHub
GHSA ID
GHSA-8mrm-r7h3-c3hj
CVE ID
CVE-2024-6281
Severity
high
Published
Updated
CVSS
7.3 · CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v3
7.3 · CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4
7 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Description

A path traversal vulnerability exists in the apply_settings function of parisneo/lollms versions prior to 9.5.1. The sanitize_path function does not adequately secure the discussion_db_name parameter, allowing attackers to manipulate the path and potentially write to important system folders.

CWEs

  • CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
  • CWE-440 · Expected Behavior Violation

References