CVE-2024-8581
Path Traversal in parisneo/lollms-webui
Summary
Path Traversal in parisneo/lollms-webui
Original description
The description as published by the source.
A vulnerability in the upload_app function of parisneo/lollms-webui V12 (Strawberry) allows an attacker to delete any file or directory on the system. The function does not implement user input filtering with the filename value, causing a Path Traversal error.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.com