Arbitrary Code Execution

Parisneo/lollms is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient sanitization of user input in the handling of the name parameter within the unInstallbinding function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious...