CVE-2024-11302

The CVE-2024-11302 entry concerns parisneo/lollms, specifically the lollms_binding_infos module in version V14. A missing check_access() allows an attacker to add, modify, and remove bindings via endpoints such as /install_binding and /reinstall_binding, enabling unauthorized access to binding se...