CVE-2024-9919

🗓️ 20 Mar 2025 10:09:56Reported by @huntr_aiType

cve🔗 web.nvd.nist.gov👁 66 Views🌐 WEB

Missing authentication in uninstall endpoint allows unauthorized directory deletions in Lollms Web UI.

Reporter	Title	Published	Views	Family All 8
Huntr	Missing check_access leads to directory deletion	11 Oct 202416:04	–	huntr
Circl	CVE-2024-9919	20 Mar 202512:48	–	circl
CNNVD	LoLLMs Web UI 安全漏洞	20 Mar 202500:00	–	cnnvd
Cvelist	CVE-2024-9919 Missing Authentication Check in parisneo/lollms-webui	20 Mar 202510:09	–	cvelist
EUVD	EUVD-2025-6853	3 Oct 202520:07	–	euvd
NVD	CVE-2024-9919	20 Mar 202510:15	–	nvd
RedhatCVE	CVE-2024-9919	22 Mar 202511:47	–	redhatcve
Vulnrichment	CVE-2024-9919 Missing Authentication Check in parisneo/lollms-webui	20 Mar 202510:09	–	vulnrichment

NVD

Node

lollms lollms_web_uiMatch13

[
  {
    "vendor": "parisneo",
    "product": "parisneo/lollms-webui",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/5c00f56b-32a8-4e26-a4e3-de64f139da6b

Parameter	Position	Path	Description	CWE
app_name	path	/uninstall/{app_name}	Missing authentication on uninstall endpoint allows unauthorized deletion of directories.	CWE-306, CWE-304

15 Oct 2025 13:15Current

8.4High risk

Vulners AI Score8.4

CVSS 38.4

EPSS0.00148

SSVC