Lucene search

GoogleOSV:GHSA-W9QF-83JG-2X6C

HistoryJun 27, 2024 - 9:32 p.m.

lollms vulnerable to dot-dot-slash path traversal in XTTS server

2024-06-2721:32:08

Google

osv.dev

path traversal

xtts server

parisneo/lollms

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A path traversal vulnerability exists in the XTTS server of the parisneo/lollms package version v9.6. This vulnerability allows an attacker to write audio files to arbitrary locations on the system and enumerate file paths. The issue arises from improper validation of user-provided file paths in the tts_to_file endpoint.

CPENameOperatorVersion
lollmseq1.1.16
lollmseq2.0.16
lollmseq5.9.2
lollmseq1.2.1
lollmseq5.1.1
lollmseq1.1.61
lollmseq4.1.0
lollmseq1.1.55
lollmseq5.8.2
lollmseq2.1.50

Name	Operator	Version
lollms	eq	1.1.16
lollms	eq	2.0.16
lollms	eq	5.9.2
lollms	eq	1.2.1
lollms	eq	5.1.1
lollms	eq	1.1.61
lollms	eq	4.1.0
lollms	eq	1.1.55
lollms	eq	5.8.2
lollms	eq	2.1.50

Rows per page:

1-10 of 2651

References

github.com/ParisNeo/lollms

huntr.com/bounties/fd00f112-efd0-40a1-8227-d6733716e4c0

nvd.nist.gov/vuln/detail/CVE-2024-6139

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for OSV:GHSA-W9QF-83JG-2X6C