CVE-2024-2624

🗓️ 06 Jun 2024 19:55:15Reported by @huntr_aiType

Path traversal and file upload vulnerability in lollms-webu

Reporter	Title	Published	Views	Family All 4
Vulnrichment	CVE-2024-2624 Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui	6 Jun 202418:11	–	vulnrichment
OSV	CVE-2024-2624	6 Jun 202419:15	–	osv
NVD	CVE-2024-2624	6 Jun 202419:15	–	nvd
Cvelist	CVE-2024-2624 Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui	6 Jun 202418:11	–	cvelist

Nvd

Vulners

Vulnrichment

Node

lollms lollms_web_uiRange<9.4

[
  {
    "vendor": "parisneo",
    "product": "parisneo/lollms-webui",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.4",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/parisneo/lollms-webui/commit/aeba79f3ea934331b8ecd625a58bae6e4f7e7d3f
huntr	www.huntr.com/bounties/39e17897-0e92-4473-91c7-f728322191aa

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jun 2024 19:15Current

9.5High risk

Vulners AI Score9.5

CVSS39.4 - 9.8

EPSS0.001

SSVC