PT-2024-25156 · Parisneo · Lollms-Webui
Published
2024-06-06
·
Updated
2024-10-17
·
CVE-2024-3322
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
parisneo/lollms-webui versions up to 9.5
Description
A path traversal vulnerability exists in the 'cyber security/codeguard' native personality, arising from the improper limitation of a pathname to a restricted directory in the 'process folder' function within 'lollms-webui/zoos/personalities zoo/cyber security/codeguard/scripts/processor.py'. The function fails to properly sanitize user-supplied input for the
code folder path, allowing an attacker to specify arbitrary paths using '../' or absolute paths. This flaw leads to arbitrary file read and overwrite capabilities in specified directories without limitations, posing a significant risk of sensitive information disclosure and unauthorized file manipulation.Recommendations
As a temporary workaround, consider disabling the
process folder function until a patch is available.
Restrict access to the cyber security/codeguard native personality to minimize the risk of exploitation.
Avoid using the code folder path variable in the affected API endpoint until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Lollms-Webui