Lucene search
K

4 matches found

NVD
NVD
added 2024/06/10 3:15 p.m.21 views

CVE-2024-4403

A Cross-Site Request Forgery CSRF vulnerability exists in the restartprogram function of the parisneo/lollms-webui v9.6. This vulnerability allows attackers to trick users into performing unintended actions, such as resetting the program without their knowledge, by sending specially crafted CSRF...

8.8CVSS0.00055EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/06/10 2:43 p.m.16 views

CVE-2024-4403 CSRF in restart_program in parisneo/lollms-webui

A Cross-Site Request Forgery CSRF vulnerability exists in the restartprogram function of the parisneo/lollms-webui v9.6. This vulnerability allows attackers to trick users into performing unintended actions, such as resetting the program without their knowledge, by sending specially crafted CSRF...

4.4CVSS6.9AI score0.00055EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/06/10 2:43 p.m.14 views

CVE-2024-4403 CSRF in restart_program in parisneo/lollms-webui

A Cross-Site Request Forgery CSRF vulnerability exists in the restartprogram function of the parisneo/lollms-webui v9.6. This vulnerability allows attackers to trick users into performing unintended actions, such as resetting the program without their knowledge, by sending specially crafted CSRF...

4.4CVSS0.00055EPSS
Exploits1References1
CVE
CVE
added 2024/06/10 2:43 p.m.47 views

CVE-2024-4403

CVE-2024-4403 affects the ParisNeo/LollMS-WebUI, v9.6. The issue is a CSRF vulnerability in the restart_program function , which can be triggered to cause unintended actions (e.g., resetting the program) by sending crafted CSRF forms. The flaw is attributed to a lack of CSRF protection in the aff...

8.8CVSS4.6AI score0.00055EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder