CVE-2024-1569
Uncontrolled Resource Consumption in parisneo/lollms-webui
概要
Uncontrolled Resource Consumption in parisneo/lollms-webui
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
parisneo/lollms-webui is vulnerable to a denial of service (DoS) attack due to uncontrolled resource consumption. Attackers can exploit the /open_code_in_vs_code and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the default folder opener (e.g., File Explorer, xdg-open) multiple times. This can render the host machine unusable by exhausting system resources. The vulnerability is present in the latest version of the software.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.com