Path Traversal in parisneo/lollms-webui

Published 2 y ago 2024-06-23 · modified 4 mo ago 2026-06-17 · JSON

CVSS

4.0

v3.0 · CNA

CISA KEV

not known exploited

EPSS

0.7%

percentile 52%

Public exploits

none known · Nuclei check

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'add_reference_to_local_mode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. By exploiting this vulnerability, an attacker can predict the folders, subfolders, and files present on the victim's computer. The vulnerability is present in the way the application handles the 'path' parameter in HTTP requests to the '/add_reference_to_local_model' endpoint.

CISA SSVC assessment

Exploitation: Proof of concept public
Automatable: no
Technical impact: partial
Assessed: 2 y ago 2024-06-25

Exploit prediction (EPSS)

0.67% probability of exploitation in the next 30 days, higher than 52% of all scored CVEs.

Exploits and detections

Nuclei template LoLLMS WebUI - Subfolder Prediction via Path Traversal · nuclei detection template

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	4.0	`CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`
NVD	3.1	3.3	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N`
CNA	3.0	4.0	`CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Affected products

parisneo parisneo/lollms-webui
parisneo lollms-webui

Classification

Weakness

CWE-29 Path Traversal: '\..\filename'

References

huntr.com /bounties/740dda3e-7104-4ccf-9ac4-8870e4d6d602 · x_transferred

Sources

CVE List: CVE-2024-4841
NVD: CVE-2024-4841

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary