Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/01 12:00 a.m.•5 views

CVE-2024-6040: Cross-Site Request Forgery (CSRF)

In parisneo/lollms-webui version v9.8, the lollmsbindinginfos is missing the clientid parameter, which leads to multiple security vulnerabilities. Specifically, the endpoints /reloadbinding, /installbinding, /reinstallbinding, /unInstallbinding, /setactivebindingsettings, and /updatebindingsettin...

8.8CVSS6.1AI score0.00166EPSS
SaveExploits1References1
Rows per page
Query Builder