Lucene search

CVE-2024-4498

🗓️ 25 Jun 2024 20:12:15Reported by @huntr_aiType

cve🔗 web.nvd.nist.gov👁 34 Views🌐 WEB

A Path Traversal and Remote File Inclusion vulnerability in lollms-webui v9.7 and later version

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2024-4498 Path Traversal and RFI Vulnerability in parisneo/lollms-webui	25 Jun 202419:55	–	cvelist
Vulnrichment	CVE-2024-4498 Path Traversal and RFI Vulnerability in parisneo/lollms-webui	25 Jun 202419:55	–	vulnrichment
RedhatCVE	CVE-2024-4498	5 Feb 202500:09	–	redhatcve
NVD	CVE-2024-4498	25 Jun 202420:15	–	nvd

Vulnrichment

Node

parisneo lollms-webuiMatch9.7

[
  {
    "vendor": "parisneo",
    "product": "parisneo/lollms-webui",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/9238e88a-a6ca-4915-9b5d-6cdb4148d3f4

Parameter	Position	Path	Description	CWE
discussion_db_name	query param	/apply_settings	Path Traversal and Remote File Inclusion vulnerability allowing file system traversal and arbitrary file inclusion.	CWE-22
data.name	query param	/install_binding	Bypass of input filtering enabling potential Path Traversal vulnerability.	CWE-22
data.name	query param	/reinstall_binding	Bypass of input filtering enabling potential Path Traversal vulnerability.	CWE-22
data.name	query param	/unInstall_binding	Bypass of input filtering enabling potential Path Traversal vulnerability.	CWE-22

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Jun 2024 20:15Current

7.8High risk

Vulners AI Score7.8

CVSS37.7

EPSS0.00117

SSVC

CWE-22