Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/16 9:33 a.m.4 views

GHSA-PWC9-Q4HJ-PG8G LoLLMS Command Injection vulnerability

A vulnerability in the parisneo/lollms, specifically in the /unInstallbinding endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the name parameter in the unInstallbinding function, allowi...

9.8CVSS9.7AI score0.00916EPSS
SaveExploits0References4
Rows per page
Query Builder