PT-2024-19956 · Parisneo · Lollms-Webui

Published 2024-06-06 · Updated 2024-10-17 · CVE-2024-2360

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui version latest

Description The issue is related to path traversal attacks that can lead to remote code execution due to insufficient sanitization of user-supplied input in the 'Database path' and 'PDF LaTeX path' settings. An attacker can exploit this vulnerability by manipulating these settings to execute arbitrary code on the targeted server. The vulnerability stems from the application's handling of the discussion db name and pdf latex path parameters, which do not properly validate file paths, allowing for directory traversal. This vulnerability can also lead to further file exposure and other attack vectors by manipulating the discussion db name parameter.

Recommendations As a temporary workaround, consider disabling the manipulation of the discussion db name and pdf latex path parameters until a patch is available. Restrict access to the 'Database path' and 'PDF LaTeX path' settings to minimize the risk of exploitation. Avoid using the discussion db name parameter in a way that could lead to directory traversal until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

CWE-29

Related Identifiers

CVE-2024-2360

Affected Products

Lollms-Webui

References · 6

• 🔥 https://huntr.com/bounties/65d0ef59-a761-4bbd-86fa-dd8e8621082e · Exploit
• https://osv.dev/vulnerability/CVE-2024-2360 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-2360 · Security Note
• https://t.me/cvenotify/98538 · Telegram Post
• https://twitter.com/CVEnew/status/1798795447156478081 · Twitter Post
• https://twitter.com/CveFindCom/status/1798799758124875954 · Twitter Post