CVE-2024-8581
Path Traversal in parisneo/lollms-webui
Résumé
Path Traversal in parisneo/lollms-webui
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability in the upload_app function of parisneo/lollms-webui V12 (Strawberry) allows an attacker to delete any file or directory on the system. The function does not implement user input filtering with the filename value, causing a Path Traversal error.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.com