CVE-2024-9597

🗓️ 20 Mar 2025 10:09:32Reported by @huntr_aiType

cve🔗 web.nvd.nist.gov👁 39 Views🌐 WEB

Path Traversal vulnerability in `/wipe_database` allowing directory deletion via HTTP request.

Reporter	Title	Published	Views	Family All 7
CNNVD	LoLLMs 路径遍历漏洞	20 Mar 202500:00	–	cnnvd
Cvelist	CVE-2024-9597 Path Traversal in parisneo/lollms	20 Mar 202510:09	–	cvelist
EUVD	EUVD-2025-6855	3 Oct 202520:07	–	euvd
NVD	CVE-2024-9597	20 Mar 202510:15	–	nvd
RedhatCVE	CVE-2024-9597	22 Mar 202511:51	–	redhatcve
Snyk	Directory Traversal	20 Mar 202510:46	–	snyk
Vulnrichment	CVE-2024-9597 Path Traversal in parisneo/lollms	20 Mar 202510:09	–	vulnrichment

[
  {
    "vendor": "parisneo",
    "product": "parisneo/lollms",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/1f6c8908-d486-4141-be55-25bd29933d8b

Parameter	Position	Path	Description	CWE
key	request body	/wipe_database	Path traversal vulnerability in /wipe_database using key to construct file paths allows deletion of arbitrary directories.	CWE-22

15 Apr 2026 00:35Current

6.9Medium risk

Vulners AI Score6.9

CVSS 37.1

EPSS0.0029

SSVC

CWE-22