CVE-2024-8581
Path Traversal in parisneo/lollms-webui
概要
Path Traversal in parisneo/lollms-webui
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability in the upload_app function of parisneo/lollms-webui V12 (Strawberry) allows an attacker to delete any file or directory on the system. The function does not implement user input filtering with the filename value, causing a Path Traversal error.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.com