CVE-2024-4328

A Cross-Site Request Forgery CSRF vulnerability exists in the clearpersonalityfileslist function of the parisneo/lollms-webui v9.6. The vulnerability arises from the use of a GET request to clear personality files list, which lacks proper CSRF protection. This flaw allows attackers to trick users...

CVE-2024-4328

A Cross-Site Request Forgery CSRF vulnerability exists in the clearpersonalityfileslist function of the parisneo/lollms-webui v9.6. The vulnerability arises from the use of a GET request to clear personality files list, which lacks proper CSRF protection. This flaw allows attackers to trick users...

PT-2024-30444

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui version 9.6 Description A Cross-Site Request Forgery CSRF vulnerability exists in the clear personality files list function. The vulnerability arises from the use of a GET request to clear personality files list, which...