Lucene search

CVE-2024-6085

🗓️ 27 Jun 2024 19:19:15Reported by @huntr_aiType

Path traversal vulnerability in XTTS server lollms v9.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Github Security Blog	lollms vulnerable to path traversal due to unauthenticated root folder settings change	27 Jun 202421:32	–	github
OSV	GHSA-9CHM-M6X2-6FVC lollms vulnerable to path traversal due to unauthenticated root folder settings change	27 Jun 202421:32	–	osv
NVD	CVE-2024-6085	27 Jun 202419:15	–	nvd
Cvelist	CVE-2024-6085 Path Traversal in parisneo/lollms	27 Jun 202418:45	–	cvelist
Vulnrichment	CVE-2024-6085 Path Traversal in parisneo/lollms	27 Jun 202418:45	–	vulnrichment

Vulnrichment

Node

parisneo lollms_web_uiMatch9.6

[
  {
    "vendor": "parisneo",
    "product": "parisneo/lollms",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/d2fb73d7-4b4f-451a-8763-484c189a27fe

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jun 2024 19:15Current

8.7High risk

Vulners AI Score8.7

CVSS38.6

EPSS0.0051

SSVC

CWE-22