PT-2024-30896

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui version 9.6 Description A Cross-Site Request Forgery CSRF issue exists in the restart program function, allowing attackers to trick users into performing unintended actions, such as resetting the program without their...

LoLLMs security vulnerabilities

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from inadequate protection of sensitive endpoints, allowing unauthorized access to endpoints such as /restartprogram, /updatesoftware, /,...