GitStock

parisneo/lollms · Security

lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE

Open GitHub
GHSA ID
GHSA-m45c-v46h-c788
CVE ID
CVE-2024-5824
Severity
high
Published
Updated
CVSS
7.4 · CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3
7.4 · CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A path traversal vulnerability in the /set_personality_config endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the configs/config.yaml file. This can lead to remote code execution by changing server configuration properties such as force_accept_remote_access and turn_on_code_validation.

CWEs

  • CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References